Microsoft Edge (Chromium-based) Use-After-Free Vulnerability Leading to Remote Code Execution

A use-after-free vulnerability has been identified in Microsoft Edge (Chromium-based), allowing an unauthorized attacker to execute code remotely. This vulnerability requires user interaction, as it involves convincing a user to open a specially crafted file or visit a malicious website.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, a user must be convinced to open a specially crafted file or visit a website that exploits the use-after-free condition in Microsoft Edge. This can be done by hosting the malicious content and persuading the user to interact with it, such as through an email or message.

Remediation

Users can download the security update for Microsoft Edge (Chromium-based) from the Microsoft Update Catalog.