Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT Security Bulletin
ASB-2021.0178
Microsoft Security Update Release for Microsoft Edge (Chromium-based)
10 September 2021
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Microsoft Edge (Chromium-based)
Operating System: Windows
Impact/Access: Reduced Security -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2021-38669
OVERVIEW
The following Chrome CVE has been released on September 9, 2021.
This CVE was assigned by Chrome.
Microsoft Edge (Chromium-based) ingests Chromium,
which addresses this vulnerability.
Please see Google Chrome Releases for more information. [1]
Edge version: 93.0.961.44
Chromium version: 93.0.4577.63 [2]
IMPACT
The following vulnerability hs been addressed:
* CVE-2021-38669
See Security Update Guide Supports CVEs Assigned by Industry Partners
for more information about third-party CVEs in the Security Update Guide. [3]
MITIGATION
It is advised to update Edge to the latest release.
REFERENCES
[1] Google Chrome Releases
https://chromereleases.googleblog.com/2021
[2] Security Update Guide
https://msrc.microsoft.com/update-guide
[3] Security Update Guide Supports CVEs Assigned by Industry Partners
https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/
AusCERT has made every effort to ensure that the information contained
in this document is accurate. However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=0wKv
-----END PGP SIGNATURE-----