Microsoft Edge Improper Authorization Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Edge (Chromium-based) due to improper authorization. This issue allows an unauthorized attacker to execute code over a network. The vulnerability affects Microsoft Edge versions through 150.0.4078.48.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, an attacker must host a specially crafted website designed to exploit the authorization flaw in Microsoft Edge. The attacker must then convince a user to visit the website and open a specific file that triggers the code execution. This can be done by enticing the user through email, instant messaging, or by having them open an attachment.

Remediation

Users can download the security update for Microsoft Edge (Chromium-based) from the Microsoft Edge Release Notes Security page.