Live
- Only 3 per cent green cover left in Bengaluru: IISc study
- Traditional Pallavotsavam observed at Tirumala
- Govt failed to address critical issues in edu sector
- TTD to explore AI tools for reducing darshan wait time
- Expedite Smart Street Bazaar works, officials told
- Officials asked to focus on efficient drainage system
- Relief for Siddaramaiah’s wife and minister Byrathi Suresh
- Six Indian shuttlers barred from World University Games
- Minister inspects SW hostels in Nandyal district
- Legal action on liquor scam offenders: Gottipati
CERT-In finds multiple bugs in Microsoft Edge, advises users to update
The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology
New Delhi: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, on Monday, warned users of multiple vulnerabilities in Microsoft Edge (Chromium-based) which could allow an attacker to compromise the targeted system.
The affected software includes Microsoft Edge Stable versions prior to 126.0.2592.68.
"Multiple vulnerabilities have been reported in Microsoft Edge (Chromium-based) which could allow an attacker to compromise the targeted system," said the CERT-In advisory.
According to the cyber agency, these vulnerabilities exist in Microsoft Edge (Chromium-based) due to "type confusion in V8, inappropriate implementation in WebAssembly, out of bounds memory access in dawn and use after free in dawn".
An attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted webpage, the agency mentioned.
CERT-In advised users to apply appropriate security updates as mentioned by the company.
Meanwhile, CERT-In has joined hands with financial giant Mastercard to promote cooperation and information sharing in the area of cybersecurity related to the financial sector.
The two entities will leverage their shared expertise regarding the financial sector in the fields of cybersecurity incident response, capacity building, sharing cyber threat intelligence specific to the financial sector and advanced malware analysis.
