Microsoft Edge Flaw Lets Hackers Steal Local Files

guest · Aug 2, 2018

Microsoft Edge Flaw Lets Hackers Steal Local Files
August 02, 2018
https://www.bleepingcomputer.com/news/security/microsoft-edge-flaw-lets-hackers-steal-local-files/

Microsoft has fixed a vulnerability in the Edge browser that could be abused against older versions to steal local files from a user's computer.
Edge flaw is SOP-related
Albeniz says that Edge's SOP implementation works as intended except one case —when users are tricked into downloading a malicious HTML file on their PC and then running it.

When the user runs this HTML file, its malicious code will be loaded via the file:// protocol, and because it's a local file, it will not have a domain and port value.

"The only way to protect yourself is to update to the latest versions of the Edge browser and Windows Mail and Calendar applications. And, of course it's best to never open attachments from unknown senders, even if the extension doesn't initially appear to be malicious," the researcher said in a report he published yesterday.
Click to expand...

Rasheed187 · Aug 4, 2018

What a joke, that's why it's important to use a folder protection tool, browsers should not have access to the full file system. For example, Sandboxie and SpyShelter give the ability to block folder access.

Log in or Sign up

Microsoft Edge Flaw Lets Hackers Steal Local Files

guest Guest

Rasheed187 Registered Member

Log in or Sign up

Microsoft Edge Flaw Lets Hackers Steal Local Files

guest Guest

Rasheed187 Registered Member

Useful Searches