Warning! This security flaw could compromise your Windows PC
The Computer Emergency Response Team - India (CERT-In) has issued a high-severity warning for users of Microsoft Edge. The alert highlights critical vulnerabilities in versions preceding 127.0.2651.86, and warns that these flaws could allow remote attackers to run arbitrary code and potentially gain unauthorized access to confidential data. The security weaknesses are due to inadequate validation of user input, insecure data handling, and out-of-bounds read issues within WebTransport and Dawn components of the browser.
Vulnerabilities could lead to unauthorized data access
With rising internet usage and reliance on online services, safeguarding personal data is more crucial than ever. Users frequently store sensitive information, such as banking details, personal identification, and location data, in their browsers, making it vital to keep security measures current. The security flaws can be exploited if a user visits a malicious website, leading to sensitive information stored within the browser getting compromised.
CERT-In advises users to update their browser
CERT-In strongly recommends all Microsoft Edge users to upgrade to version 127.0.2651.86 or later, in order to avoid the risks associated with these vulnerabilities. The update addresses the identified flaws and enhances the overall security of the browser. This advice comes as part of a broader effort to encourage individuals and organizations alike, to stay current with browser updates as a critical step in ensuring online safety amid increasing cyber threats.