Microsoft Fixes Critical Security Bugs in Edge Browser – Four critical flaws allowed remote code execution.
Microsoft Edge has released a few security updates in this month's Patch Tuesday rollout, and all users are advised to install them as soon as possible because they address critical bugs that could allow remote code execution.
MS15-095 (you can find it here:) is a critical security bulletin specifically targeting Microsoft Edge, and fixes a set of four different vulnerabilities, all rated critical on Windows clients and moderate on Windows servers. They are also marked as memory corruption vulnerabilities and rely on web pages that have been compromised by attackers and that must be loaded from an unpatched system.
Microsoft explains how a successful exploit could work:
"An attacker could also take advantage of unsecured websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit these vulnerabilities.".
In all cases, however, an attacker would have no way to force users to view content controlled by the attacker. Instead, an attacker would have to convince users to take action, typically by clicking a link in an instant messenger or email message that takes users to the attacker's website, or by getting them to open an attachment sent via email.”
Vulnerability issues in Internet Explorer as well
The same vulnerabilities found in Microsoft Edge also exist in Internet Explorer and were patched with the MS15-094 (you can find it here:), so even if you're not on Windows 10, you're still at risk, especially if you use Microsoft's old browser on a daily basis.
In general, you should avoid clicking on unknown links that come from sources that could put your computer at risk, so whenever you suspect a link that could harm your computer, then you should stay away from it.
Microsoft has made it clear that successful exploitation involves user interaction, so if you keep your eyes peeled for every click you make, you'll stay safe until the vulnerabilities are patched. After that, your computer should be completely secure.
