Microsoft Edge Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Edge (Chromium-based) versions through 150.0.4078.48. This vulnerability arises from improper input validation, which allows an unauthorized attacker to execute code over a network. Exploitation requires user interaction, such as opening a specially crafted file or visiting an attacker-controlled website.

Impact

Successful exploitation of this vulnerability could lead to remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, a user must open a specially crafted file from an attacker, which can initiate remote code execution. Alternatively, an attacker could host a malicious website designed to exploit this vulnerability. However, the user would need to be convinced to visit the site, such as through an email or message.

Remediation

Users can download the security update for this vulnerability from the Microsoft Update Catalog.