New Edge 113 available for download

Microsoft has released version 113 of the Edge web browser. The developers have improved some functions and fixed several vulnerabilities.

In the new Edge web browser version, Microsoft has simplified the enhanced security mode. It now only knows the Balanced and Strict settings, but is disabled by default. According to Microsoft's description, enhanced security mode improves protection against malicious websites especially those that are rarely visited by allowing the browser to disable the just-in-time compiler and hardware-assisted stack protection, an Arbitrary Code Guard (ACG ) and the Control Flow Guard (CFG) are activated.

IT managers in networks are given new guidelines, such as the RestorePdfView setting. In the according release notes, Microsoft explains that if the version has been activated or not configured, Edge restores the last state of the PDF view and takes users to the section they read in the last session.

Under macOS, the EdgeUpdater is now used instead of Microsoft Autoupdate. The MicrosoftRootStoreEnabled policy should still support Edge 113 and 114, Edge 115 will no longer support the policy. The guidelines RestorePDFView, EnforceLocalANchorConstraintsEnabled, ReadAloudEnabled, ShowDownloadsToolbarButton and TabServiceEnabled are new.

In addition to the security updates from the Chromium project, which Google Chrome 113 brings with it, Microsoft additionally fixed two more security vulnerabilities. A vulnerability allows attackers to escalate their privileges if they trick victims into clicking on a crafted link (CVE-2023-29350, CVSS 7.5, risk high). The other vulnerability allows attackers to bypass the Content Security Policy and the pop-up blocker (CVE-2023-29354, CVSS 4.7, risk medium).

Edge users can ensure the latest updates are downloaded and installed on the system by going to Windows Update. In addition, calling up the settings menu via the symbol with the three dots on the right of the address bar, down to Help and Feedback and finally to Info about Microsoft Edge also works. If necessary, this triggers the update check.