Microsoft Edge (Chromium-based) 135.0.7049.114/.115 - Information Disclosure

Impact

For European organizations, this vulnerability poses a risk of sensitive information leakage, which can lead to privacy violations, exposure of confidential business data, and potential compliance issues under regulations like GDPR. Attackers exploiting this flaw could harvest session cookies, authentication tokens, or other browser-stored secrets, facilitating further attacks such as account takeover or lateral movement within networks. Sectors such as finance, healthcare, government, and critical infrastructure are particularly vulnerable due to the sensitive nature of their data and the widespread use of Microsoft Edge in enterprise environments. The medium severity suggests that while the impact is significant, it does not directly compromise system integrity or availability, but the confidentiality breach alone can have serious consequences including reputational damage and regulatory penalties. The remote nature of the exploit increases the attack surface, as attackers can target users over the internet without requiring physical access or user interaction.