[German]On November 13, 2020, Microsoft has published a security advisory that refers to another security update of the Edge Browser. Microsoft had to close two vulnerabilities that were unpatched in Edge 86.0.622.68. Here is some brief information about this.
I had already wondered in the blog post Edge 86.0.622.68 released that the vulnerabilities closed in Chrome (see blog post Google Chrome 86.0.4240.198) had not been addressed. This has probably happened in the meantime with Edge 86.0.622.69. The Microsoft Security Advisory ADV200002 announces a security update for the Microsoft Chromium Edge. Here is the relevant information:
*********************************************************
Title: Microsoft Security Advisory Notification
Issued: November 11, 2020
*********************************************************
Security Advisories Released or Updated on November 11, 2020
=========================================================
* Microsoft Security Advisory ADV200002
– ADV200002 | Chromium Security Updates for Microsoft Edge based on Chromium
– Reason for Revision: Updated advisory to announce a new version of Microsoft Edge
(Chromium-based). Please see the table for more information.
– Originally posted: January 28, 2020
– Updated: November 13, 2020
– Version: 28.0
Google had just updated Chrome for security reasons, as I wrote in the blog post Google Chrome 86.0.4240.198. Edge 86.0.622.69, released on November 13, 2020, is based on Google Chrome 86.0.4240.198. The security update, rated High, closes vulnerabilities CVE-2020-16013 and CVE-2020-16017. Details about this vulnerability can be found in the blog post Google Chrome 86.0.4240.198. The browser should update automatically.
