Security Program Manager @ Microsoft Edge || Thoughts are my own
Joined September 2020
- Tweets113
- Following177
- Followers152
- Likes85
The Edge Security team relentlessly bolsters defenses, erecting fresh barriers to thwart any attempts at escaping the Renderer sandbox 🛡️🔒
microsoftedge.github.io/edge…
Our first Edge bounty case that highlighted an Adobe PDF RCE within the product: CVE-2023-44323.
Vuln impacts Adobe Acrobat for Edge version 118.0.2088.46 (and earlier)
msrc.microsoft.com/update-gu…
Edge rolled out a fix to the latest 0day (CVE-2023-3079) and, once again, if opt-ed into Enhanced Security Mode it will help mitigate this JIT related vulnerability 😍
Can we just turn ESM on by default on Edge ?
learn.microsoft.com/en-us/de…
Edge released 112.0.1722.54 addressing the latest 0day (CVE-2023-2136). It does not impact Windows, but other OS (like Linux, macOS, and Android)
learn.microsoft.com/en-us/de…
Edge has rolled out 112.0.1722.48 which contains the 0day fix (CVE-2023-2033)
learn.microsoft.com/en-us/de…
Another chromium JIT 0day. Luckily, Edge's enhanced security mode helps mitigate this vulnerability🙂.
Edge's security patch will roll out soon, but until then, I will continue to be super duper secure.
chromereleases.googleblog.co…
Patrizio retweeted
My team and I have been working with the Edge PDF team and the fine folks at Adobe for a couple of years on this. Very excited to finally see it land.
.@Adobe and Microsoft are enhancing the PDF experience and value users have come to expect in Microsoft Edge by powering the built-in PDF reader with Adobe Acrobat's PDF engine.
Learn more: msft.it/60195MzwF
During the weekend, Microsoft Edge rolled out Stable 107.0.1418.26 and Extended Stable 106.0.1370.61.
Both containing the latest Chromium 0-day fix (CVE-2022-3723).
Our Release Notes will be updated shortly.
Thank you @david_erceg for helping strengthen the security of Microsoft Edge!
Microsoft have just published a blog post I wrote about various bugs I found in Edge last year. Read it here: microsoftedge.github.io/edge…
Did you hear?
Enhanced Security Mode now supports WASM under all preferences (currently only on Windows x64 platforms). This is super duper #MicrosoftEdge
Patrizio retweeted
Edge 105 will release to stable this week and include WASM support for Enhanced Security Mode on Windows x64 platforms. So far millions of users have tried jitless browsing and seem to enjoy it, despite the claims it would be too slow. 1/
enhanced security mode just added a new mode: Basic Mode.
This is a stepping stone forward to ensure you browser unfamiliar sites more securely
When looking at browser performance under Lockdown Mode (Apple) and Enhanced Security Mode (Edge), JS benchmarks are one thing, but actual usability in practical performance shouldn’t be underrated.