Microsoft Edge (Chromium-based) Relative Path Traversal Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Edge (Chromium-based) versions through 150.0.4078.48. This vulnerability arises from relative path traversal, which allows an unauthorized attacker to execute code over a network. Exploitation requires user interaction, such as opening a specially crafted file or visiting an attacker-controlled website.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, a user must open a specially crafted file that exploits the relative path traversal flaw in Microsoft Edge. This can be done by hosting the file on a network share or through a website, and then convincing the user to access it.

Remediation

Users can download the security update for this vulnerability from the Microsoft Update Catalog.