High Threat Security Alert (A23-04-11): Vulnerability in Microsoft Edge
17 April 2023
Microsoft released a security update to address a vulnerability in Microsoft Edge. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerability.
Reports indicate that the vulnerability (CVE-2023-2033) is being exploited in the wild. System administrators and users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Microsoft Edge prior to version 112.0.1722.48
Successful exploitation of the vulnerability could lead to arbitrary code execution on an affected system.
Users of affected systems should update Microsoft Edge to version 112.0.1722.48 or later to address the issue.
The list of security updates can be found at: https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#april-14-2023