BSI warns of remote attacks on Edge and Chrome users

Google and Microsoft have released important security updates for their browsers. The BürgerCERT of the Federal Office for Information Security (BSI) has already issued a warning the risk is high.

Security warning from the BSI

This now concerns a total of 16 vulnerabilities, about which hardly any information was initially released, or only in part, so that users are not exposed to greater danger. The information is usually only released a few days after the updates are released. According to the BSI, the security holes can be exploited by a remote, anonymous attacker to execute arbitrary program code and cause other, unspecified effects. The BSI classified the risk as high, with the CVSS Base Score being 8.8.

A remote anonymous attacker can exploit several vulnerabilities in Google Chrome and Microsoft Edge to execute arbitrary code or perform an unspecified attack. BSI warning

The security vulnerabilities discovered a few days ago are present in Chromium, and thus in the underlying structure of Chrome and Edge.

Edge update

Microsoft has also only reported superficially so far. The Edge update in the latest version only brings the changes to fix the vulnerabilities. At Microsoft you can view the release notes and in the Track Edge update history. Edge’s update history now states: “Microsoft has released the latest Microsoft Edge Stable Channel (version 127.0.2651.86) and Extended Stable Channel (version 126.0.2592.132), which contain the latest security updates from the Chromium project. For more information, see the Security Update Guide.” In the cited guide, however, Microsoft only refers to Google, where no details are yet available. “This CVE was assigned by Chrome.

Microsoft Edge (Chromium-based) includes Chromium, which fixes this vulnerability.” Microsoft has also started the security updates for the older version in the Extended Stable Channel. Anyone who uses Microsoft Edge simply gets the update as an auto-update. This also applies to Google Chrome. The latest Edge version has the number 127.0.2651.86 and is already available in our WinFuture download center and can be downloaded at the end of this article. Google Chrome is version 127.0.6533.88/89. According to the Federal Office for Information Security, the updates should be installed urgently.