Published on: 19 April 2022
Microsoft released a security update to address multiple vulnerabilities in Microsoft Edge (Chromium-based). A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerability.
Reports indicate that the remote code execution vulnerability (CVE-2022-1364) is being exploited in the wild. You are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Successful exploitation of the vulnerabilities could lead to remote code execution, elevation of privilege, information disclosure or security restriction bypass on an affected system.
Users of affected systems should update Microsoft Edge (Chromium-based) to version 100.0.1185.44 or later to address the issue.
The list of security updates can be found at:
https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#april-15-2022