What you need to know
- Microsoft rolled out an update for Edge stable that includes several security fixes.
- One of the fixes addresses a security issue that has been exploited in the wild.
- The update for Edge started shipping on September 16, 2021.
The fix contained in the update is marked as important by Microsoft. The summary of version 93.0.961.52 reads:
This update contains a fix for CVE-2021-30633, which has been reported by the Chromium team as having been exploited in the wild. For more information, see the Security Update Guide.
In total, the update addresses eight security issues for the Edge browser. You can read the complete list on Microsoft's website.
"This CVE was assigned by Chrome, explains Microsoft. "Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information."
Microsoft also explains why this Chrome CVE was included in the Security Update Guide:
The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable. Please see Security Update Guide Supports CVEs Assigned by Industry Partners for more information.
Microsoft just released a security update for the stable version of its Edge browser. The update should install when you restart Edge.
