Bug in IE Mode that allows users to circumvent Internet Explorer disabled as a standalone browser

Iron Contributor

Hello,
I came across a bug/oversight that allows users to access Internet Explorer as a standalone browser on systems where Internet Explorer is disabled. I am posting it here because I can do this within the IE Mode feature of Edge. 
I can duplicate this on a Windows 10 system where IE is disabled via this policy:
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser

I can also duplicate this on a Windows 11 computer, where iexplore should be disabled by default. 
On both my test machines, running iexplore.exe using any other method redirects to Edge as intended by the policy. 

 

To duplicate:

  1. Start with a fresh installation of Windows/Edge. You may also be able to duplicate this by resetting Internet Explorer to its default settings. 
  2. Disable Internet Explorer as a standalone browser
  3. Configure a site with fillable form fields to open in IE Mode
  4. Visit that site in IE Mode, then enter an entry in one of the form fields
  5. A banner will pop up asking if you want AutoComplete to remember form entries:
    AndrewSAIF_0-1664824988255.png
  6. Either press Alt+L or click the link

Internet Explorer will open as a standalone browser, and can be used normally to browse sites as far as I can tell. 

AndrewSAIF_1-1664825146323.png

 

Not sure if this has already been reported but I feel like it should be addressed since IE use is a security concern these days. 

 

Thanks!

Andrew

2 Replies

@AndrewSAIF Thanks for reaching out!  I've passed this feedback on to the team to investigate.  

 

-Kelly

It looks like this is resolved as of Edge 110.0.1587.50/Windows 10 21H2 19044.2728/Windows 11 22H2 22621.1413.

Thanks!
Andrew