High Threat Security Alert (A23-06-02): Multiple Vulnerabilities in Microsoft Edge
07 June 2023
Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerabilities.
Reports indicate that the remote code execution vulnerability (CVE-2023-3079) is being exploited in the wild. System administrators and users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Microsoft Edge prior to version 114.0.1823.41
Successful exploitation of the vulnerabilities could lead to remote code execution, information disclosure, privilege escalation, security restriction bypass, spoofing or tampering on an affected system.
Users of affected systems should update Microsoft Edge to version 114.0.1823.41 or later to address the issue.
The details of the security update can be found at: https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#june-6-2023 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#june-2-2023