Microsoft Edge 121 available

Microsoft has released version 121 of the Edge web browser. It closes a critical security hole and provides support for AV1 videos.

In addition to the security gaps that Google has closed in Chromium, the developers fixed six more. The browser also receives new functions. It now supports AV1-encoded video streams.

Of the six Edge-only vulnerabilities, one is classified as a critical risk*. Attackers can use manipulated websites to completely compromise the browser and increase their rights (CVE-2024-21326, CVSS 9.6, risk critical). Another vulnerability has the same impact, but requires more user interaction before malicious actors can exploit it, which is why it narrowly misses a critical risk rating (CVE-2024-21385, CVSS 8.3, risk high). Microsoft also lists the vulnerability CVE-2024-21388, but the link to it leads nowhere and further information remains unknown for the time being.

There are also three other security vulnerabilities, two of which only represent a medium risk and one a low risk. In addition, the new version seals security leaks that Google closed in the Chromium browser on Wednesday night. There were at least 17 vulnerabilities in Chromium, some of which probably also made it possible to inject code using crafted websites.

The Release Notes for the new Edge build also list some new features and improvements. Edge now also supports the AVIF and AV1 file formats, which enable better compression and higher quality of images and videos.

The typing protection has been enhanced and warns users if a specified URL leads to malicious destinations. Edge for Business allows branding in the company CI using the look stored in Entra. To do this, admins must have configured "Company Branding" in the Entra Admin Center.

Edge version 121.0.2277.83 and the extended stable release 120.0.2210.160 eliminate security-related errors in the software. Since some of the vulnerabilities are considered critical, Edge users should check for themselves whether the current version is already running. The version dialog, which downloads and installs the update if necessary and displays the currently running software version, can be accessed by clicking on the settings menu, which is hidden behind the symbol with the three horizontal dots to the right of the address bar, and then continuing via Help and Feedback – Go to About Microsoft Edge.