Microsoft fixes a zero-day threat and several high-severity vulnerabilities in Edge (Chromium-based) 98.0.1108.55 (Stable Channel update).

Microsoft fixes a zero-day threat and several high-severity vulnerabilities in Edge (Chromium-based) 98.0.1108.55 (Stable Channel update).

Hey everyone,

 

Microsoft Edge (Chromium-based) has been updated to 98.0.1108.55 for Windows, Mac, and Linux. This Stable channel update fixes a zero-day threat (tracked as CVE-2022-0609) as well as a number of high-severity vulnerabilities.

 

Here are the details:

CVE ID
Vulnerability
Severity
CVE-2022-0603
Use after free in File Manager
High
CVE-2022-0604
Heap buffer overflow in Tab Groups
High
CVE-2022-0605
Use after free in Webstore API
High
CVE-2022-0606
Use after free in ANGLE
High
CVE-2022-0607
Use after free in GPU
High
CVE-2022-0608
Integer overflow in Mojo
High
CVE-2022-0609
Use after free in Animation
High
CVE-2022-0610
Inappropriate implementation in Gamepad API
Medium

To install this update on your Windows/Mac machines, initiate a sync between the Central Patch Repository and the Desktop Central / Patch Manager Plus / Vulnerability Manager Plus server. Once the sync is complete, search for the following Patch IDs or Bulletin ID and deploy them to your target systems.


Patch ID
Bulletin ID 
Patch Description
323651
TU-1035
Microsoft Edge for chromium business (x64) (98.0.1108.55)
323650
TU-1035
Microsoft Edge for chromium business (98.0.1108.55)

Cheers,

The ManageEngine Team