Microsoft Edge Security Update – 25 August 2024

By /
  • 239/2024
  • High

Microsoft has released an updated Microsoft Edge Stable Channel (Version 128.0.2739.42) to address multiple vulnerabilities.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, bypass security restrictions, execute buffer overflow attacks, or execute arbitrary code and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. Microsoft Edge (Chromium-based) Buffer Overflow Vulnerability (CVE-2024-7973):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Access

2. Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2024-43472):

  • CVSS: 5.8
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Privileges
Vulnerabilities

Microsoft Edge Security Update

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft Edge Security Update

References

Microsoft Edge Security Update