Microsoft Edge Type Confusion Vulnerability Allowing Security Feature Bypass

A type confusion vulnerability has been identified in Microsoft Edge (Chromium-based) version 150.0.4078.48. This vulnerability allows an unauthorized attacker to bypass a security feature over the network. The issue arises from the access of resources using incompatible types, which can be exploited to manipulate how the browser handles certain data, potentially leading to unauthorized access or actions.

Impact

Exploitation of this vulnerability could bypass user access controls, allowing unauthorized actions or access to resources that should be restricted.

Remediation

Users can download the security update for Microsoft Edge (Chromium-based) version 150.0.4078.48 through the Microsoft Edge Update mechanism. For enterprise environments, the update is available via the Microsoft Edge Enterprise Update channel.