Hot on the heels of Google Chrome, Edge users need to act quickly as Microsoft confirms new vulnerabilities in its web browser.
Microsoft severity ratings reasoning links back to Edge bounty program
If you follow those CVE links to Microsoft's security update guide, both entries are rated as only 'moderate' by the vendor, rather than the CVSS high-severity rating. Microsoft states that this downgrading is due to"the amount of user interaction or preconditions required to allow this sort of exploitation." It goes on to add that,"if a bug requires more than a click, a key press, or several preconditions, the severity will be downgraded.
I'm absolutely sure the decision isn't influenced by the fact that a critical sandbox escaping bug would bring a reward of between $20,000 and $30,000 whereas a moderate one drops to just $5,000 maximum and possibly as low as $1,000. It wouldn't be overly surprising if others did come to that conclusion, however.
I have reached out to Microsoft for a statement regarding the severity rating of vulnerabilities in Edge.None of this changes the advice to update your browser as soon as possible. Consumers shouldn't wait for the rollout to reach their browser in the coming days, but instead, force the installation as per the instructions below. Business users, on the other hand, are advised to follow their patching strategy based on internal risk analysis.
Philippines Latest News, Philippines Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Working In This Cutting Edge Fifth Dimension Of Theater Jessica Hecht Discovered Unexpected MagicThis Breaking Bad actress stars with Mikhail Baryshnikov in 'the Orchard.' The play is an adaptation of The Cherry Orchard by Anton Chekhov.
Read more »
Qualcomm Launches Unified AI Stack For Cloud To Edge IntelligenceQualcomm Launches AI Stack, laying the foundation for deploy-everywhere AI models and domain-specific SDK’s.
Read more »
Here's the first official image of Motorola's cheapest Edge phoneThe first official image of Motorola's cheapest Edge smartphone, the Edge 30 Lite, has just been leaked.
Read more »
This Android Hack Could Mean Your Finances Aren't Safe — Best LifeExperts are warning Android users that a hack known as MaliBot targeting their phones could be putting their finances at serious risk.
Read more »
‘Heightened alert’: Abortion providers brace for rulingThe Department of Homeland Security has warned violence is likely to increase on both sides.
Read more »
Google Confirms New Critical Chrome Security Issue For Windows, Mac & Linux UsersGoogle has confirmed a critical Chrome web browser security vulnerability across Windows, Mac and Linux platforms.
Read more »