Is there a patch or newer version of Edge available that we could deploy to close the gap on systems running this vulnerable version of Edge (122.0.2365.52)? https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26192

C00kieMonster Hello - Microsoft Edge Stable Channel (Version 122.0.2365.52) includes the CVE. We had a slight delay publishing the Release Notes for Security Updates. Here is the updated post: Release notes for Microsoft Edge Security Updates | Microsoft Learn. Thanks! -Kelly

CVE-2024-26192 Edge 122.0.2365.52 | Microsoft Community Hub

Kelly_Y
Microsoft
Feb 26, 2024
C00kieMonster Hello - Microsoft Edge Stable Channel (Version 122.0.2365.52) includes the CVE. We had a slight delay publishing the Release Notes for Security Updates. Here is the updated post: Release notes for Microsoft Edge Security Updates | Microsoft Learn. Thanks!

-Kelly
- C00kieMonster
  Brass Contributor
  Feb 26, 2024
  Thank you so much for the quick reply, Kelly_Y - so does this mean that version 122.0.2365.52 is already patched to protect against CVE-2024-26192, and there's nothing additional we need to do outside of continuing to deploy this version throughout our environment? 😮
  - Kelly_Y
    Microsoft
    Feb 27, 2024
    C00kieMonster Yes, that is correct.
    
    The CVE link (CVE-2024-26192 - Security Update Guide - Microsoft - Microsoft Edge (Chromium-based) Information Disclosure Vulnerability) also confirms it is included in version 122.0.2365.52,
    
    Thanks!
    
    -Kelly

Forum Discussion

CVE-2024-26192 Edge 122.0.2365.52