{"id":1287,"date":"2025-01-13T15:08:10","date_gmt":"2025-01-13T15:08:10","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/13\/indian-cyber-agency-finds-bugs-in-microsoft-edge-advises-update\/"},"modified":"2025-01-13T15:08:10","modified_gmt":"2025-01-13T15:08:10","slug":"indian-cyber-agency-finds-bugs-in-microsoft-edge-advises-update","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/indian-cyber-agency-finds-bugs-in-microsoft-edge-advises-update\/","title":{"rendered":"Indian cyber agency finds bugs in Microsoft Edge, advises update"},"content":{"rendered":"\n<\/p>\n

Multiple Vulnerabilities in Microsoft Edge and Android Warned by CERT-In<\/strong><\/p>\n


\n<\/p>\n

\"Cert-In
Cert-In advised users to apply appropriate security updates as mentioned by the company.<\/span><\/figcaption><\/figure>\n

<\/p>\n

**Indian Computer Emergency Response Team Warns of Multiple Vulnerabilities**<\/p>\n

The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, on Monday, warned users of multiple vulnerabilities in Microsoft Edge (Chromium-based) and Android, which could allow an attacker to compromise the targeted system.<\/p>\n


\nThe affected software includes Microsoft Edge Stable versions prior to 125.0.2535.85.<\/p>\n

**CERT-In Advisory**<\/p>\n

“Multiple vulnerabilities have been reported in Microsoft Edge (Chromium-based) which could allow an attacker to compromise the targeted system,” said the CERT-In advisory.<\/p>\n

According to the cyber agency, these vulnerabilities exist in Microsoft Edge (Chromium-based) due to ‘out of bounds’ memory access in keyboard inputs; out of bounds write in streams API; heap buffer overflow in WebRTC, use after free in dawn, media session and presentation API.<\/p>\n


\nAn attacker could exploit these vulnerabilities by enticing a victim to open a specially crafted file, the agency mentioned.<\/p>\n

**CERT-In Advises Users to Apply Security Updates**<\/p>\n

Cert-In advised users to apply appropriate security updates as mentioned by the company.<\/p>\n

Meanwhile, the cyber agency warned users of multiple vulnerabilities in Android, which could allow an attacker to obtain sensitive information, gain elevated privileges and cause denial-of-service (DoS) conditions on the targeted system.<\/p>\n

As mentioned in the advisory, these vulnerabilities exist in Android due to flaws in the Framework, System, Google Play system updates, Kernel, Arm components, MediaTek components, Imagination Technologies and Qualcomm closed-source components.<\/p>\n

**Published On**<\/p>\n

Published On Jun 11, 2024 at 07:40 AM IST<\/p>\n

<\/p>\n

<\/p>\n

<\/p>\n

\n
\n
\n
\n

Join the community of 2M+ industry professionals<\/h2>\n

Subscribe to our newsletter to get latest insights & analysis.<\/h3>\n<\/p>\n
\n \"Newsletter
\n <\/figure>\n<\/p><\/div><\/div>\n
\n
\n
\n

Download ETCISO App <\/h2>\n