Oleg Zaytsev

The issue is related to insufficient protection of the web page structure in Microsoft Edge, allowing a remote attacker to bypass security restrictions and conduct cross-site scripting attacks using a specially crafted malicious web page.

The issue is related to the exploitation of Microsoft Edge's Marketing API, allowing attackers to covertly install browser extensions without user consent. This could lead to a privilege escalation threat. The vulnerability was actively exploited and has been patched by Microsoft. Users are advised to update to the latest version to ensure a secure browsing experience.