The Indian Computer Emergency Response Team (CERT-In) under the IT ministry has issued a high severity warning for Microsoft Edge browser users. The warning is for the users who are using browser’s version prior to 100.0.1185.44. As per the warning, multiple vulnerabilities have been reported in Edge browser which could allow a remote attacker to compromise the targeted system.
“These vulnerabilities exist in Edge due to Elevation of Privilege, Type Confusion in V8, Use after free in tab groups, Use after free in storage, Use after free in regular expressions, Insufficient policy enforcement in developer tools, Use after free in BFCache, Inappropriate implementation in full screen and Inappropriate implementation in compositing” the advisory reads.
An attacker could exploit these vulnerabilities by enticing a victim to open a specially crafted file. Successful exploitation of these vulnerabilities could allow an attacker to compromise the targeted system.
To avoid any exploitation, the CERT-In wants Edge browser users to update to version 100.0.1185.44. The version was rolled out by the tech giant last week and it incorporates the latest Security Updates of the Chromium project.
Earlier this month, Microsoft surpassed one of its major rivals, Apple, when it comes to browsers on desktop PCs. According to a report from web analytics service StatCounter, Microsoft browser Edge is now the second most used desktop web browser worldwide, second to Google Chrome.
As per the report, Microsoft Edge is now used on 9.65% of desktops worldwide, just marginally ahead of Apple’s Safari with a 9.57% market share. The data also reveals that Google Chrome still holds the largest market share with 67.26% of users. Edge has seen significant growth since the launch of the new Windows OS.