The PortalFuse Microsoft Intune and Security Report Podcast

PortalFuse Weekly Security Update Report (Windows and Edge Edition) – December 17, 2024

Listen Later

A quiet week so far for the holidays. Two critical security vulnerabilities affecting Microsoft Edge, stemming from the Chromium project, were addressed this week.


Two critical security vulnerabilities affecting Microsoft Edge, stemming from the Chromium project, were addressed this week. These vulnerabilities underscore the importance of timely updates to ensure system security and user safety. With these fixes in place, users can mitigate significant risks posed by these flaws.

CVE-2024-12382 Use After Free in Translate
  • Vulnerability Description: This flaw affects the Translate feature in Microsoft Edge, which is built on Chromium OSS. An attacker exploiting this vulnerability could execute arbitrary code within the context of the current user. The issue arises from improper memory management.
  • Resolution: Microsoft has addressed this vulnerability in Edge version 131.0.2903.99, released on December 12, 2024. The update aligns with Chromium’s fixes, ensuring system integrity.
  • Action Required: System administrators should prioritize updating to this version of Microsoft Edge immediately. For further details, refer to the Microsoft Edge Security Release Notes.
    • CVE-2024-12381 Type Confusion in V8
    • Vulnerability Description: This type confusion vulnerability in Chromium’s V8 JavaScript engine could enable an attacker to execute arbitrary code. As with CVE-2024-12382, this issue impacts Microsoft Edge due to its dependency on Chromium OSS.
    • Resolution: The fix was incorporated in the same Edge release (version 131.0.2903.99) on December 12, 2024.
    • Action Required: Ensure all systems using Microsoft Edge are updated to version 131.0.2903.99 to mitigate risks.

      • Both vulnerabilities illustrate the interconnected nature of software ecosystems like Chromium-based browsers. Proactive updates are critical in minimizing exposure to such risks.

       

      We then turn to another significant development—the resolution of issues with WPF applications using IMEs. We also cover open issues with dual boot Linux systems and the WinApp SDK.


      Give us a few minutes of your time to get the latest updates for Edge.

      ...more
      View all episodesView all episodes
      Download on the App Store
      The PortalFuse Microsoft Intune and Security Report PodcastBy Kevin Kaminski