Microsoft Edge Security Restriction Bypass Vulnerability

Release Date: 18 Aug 2022 6551 Views

RISK: Medium Risk

TYPE: Clients - Browsers

A vulnerability was identified in Microsoft Edge. Attacker could exploit the vulnerability to trigger security restriction bypass on the targeted system.

Note:
CVE-2022-2856 is being exploited in the wild. The vulnerability related to insufficient validation of untrusted input in Intents.

Impact

Security Restriction Bypass

System / Technologies affected

Microsoft Edge prior to 104.0.1293.60

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

Update to version 104.0.1293.60 or later

Vulnerability Identifier

CVE-2022-2856

Source

Microsoft