Microsoft Edge Security Feature Bypass Vulnerability

<p>A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects.</p> <p>By itself, this bypass vulnerability does not allow arbitrary code execution. However, an attacker could use the bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code on a target system.</p> <p>To exploit the CFG bypass vulnerability, a user must be logged on and running an affected version of Microsoft Edge. The user would then need to browse to a malicious website.</p> <p>The security update addresses the bypass vulnerability by helping to ensure that Click2Play protection Microsoft Edge properly handles flash objects.</p>

Where it's fixed