Microsoft Edge Security Update 122.0.2365.66 – March 1, 2024

by
This content has been archived. But, the content is true and relevant to the underlying technology products or infrastructure services.
LinkedIn

Microsoft released an upgrade for the Edge browser on 1st March 2024. The latest stable version of Microsoft Edge is 122.0.2365.66. This is the fourth release in build 122 of the Microsoft Edge browser.

Edge version 122.0.2365.66 contains a fix for a single issue affecting the Microsoft Defender application. Chrome security updates and Edge security updates were last addressed in Edge version 122.0.2365.63. 122.0.2365.63 security update for the Edge browser was the second release in the Edge buil 122.

Since Edge version 122.0.2365.63 is the actual security update, we have covered Edge version 122.0.2365.63 and the security vulnerabilities below.

Salient points

  • Microsoft Edge stable channel version 122.0.2365.66 supersedes stable channel version 122.0.2365.63. The last update on the Edge browser took place on 29 February 2024.
  • Edge version 122.0.2365.66 corresponds to the Chrome version 122.0.6261.94/95. Chrome was updated on 27 February 2024.
  • Chromium vulnerabilities – There have been 4 security fixes in the Edge version 122.0.2365.63 update for Windows. 2 of these security vulnerabilities were detected by external researchers. These vulnerabilities are listed below.
  • Microsoft vulnerabilities – There has been 1 security fix in Edge version 122.0.2365.63 that is specific to Microsoft. These vulnerabilities are shared below.
  • Resolved a network issue that prevented sites from loading within a Microsoft Defender Application Guard window.

Vulnerabilities

The current update for Edge for Windows 122.0.2365.66 contains a fix for the Microsoft Defender Application.

Chromium vulnerabilities

Edge version 122.0.2365.63 has a fix for 4 security vulnerabilities in the Chromium project. Two of these vulnerabilities have been uncovered by external researchers. We have shared these below.

  • Both vulnerabilities have a HIGH severity
CVE detailsSeverityVulnerability details
CVE-2024-1938HIGHOut of bounds memory access in Blink
CVE-2024-1939HIGHUse after free in Mojo

Microsoft vulnerabilities

There is a single vulnerability that is specific to Microsoft. This threat has been addressed in Edge version 122.0.2365.63. We have listed the vulnerability below.

CVE detailsCVSS scoreSeverityComments
CVE-2024-261964.3LowThe user would have to click on a specially crafted URL to be compromised by the attacker.

Install the latest version of Edge

The latest version of Microsoft Edge 122.0.2365.66 can be installed automatically. For this, you can close the browser and open it again. This should force Edge to pull the latest updated version.

Edge can also be updated manually. You can download the offline installer file for Microsoft Edge from the Microsoft Update Catalog site.

The direct download links for Edge version 122.0.2365.66 are shared below:

How to check the current Microsoft Edge version?

You can check the Microsoft Edge version installed on your system by following the instructions below:

  1. In your Microsoft Edge browser, click on the 3 dots (…) on the very right-hand side of the window
  2. Click on Help and Feedback
  3. Click on About Microsoft Edge
  4. This should give you the Microsoft Edge version on the system

The current update is being rolled out to the eligible systems.

If you restart the Microsoft Edge browser, your browser should automatically pick the latest version x from the Microsoft Servers.

February 2024 Cumulative Updates

January 2024 Cumulative Updates

The following cumulative updates for January 2024 are available:

Rajesh Dhawan

Rajesh Dhawan is a technology professional who loves to write about Cyber-security events and stories, Cloud computing and Microsoft technologies. He loves to break complex problems into manageable chunks of meaningful information.

LinkedIn