Redmond patches critical bug discovered last month

Feb 10, 2016 06:22 GMT  ·  By

Microsoft has delivered a new cumulative update for Windows 10, and one of the included fixes addresses a critical bug in Edge browser that exposed websites visited in InPrivate mode.

On the new Windows Update history page rolled out by Microsoft a few hours ago, the company reveals that the KB3135173 update for Windows 10 (which also pushes OS version to 10586.104) includes a patch that “fixes issue with Microsoft Edge browser caching visited URLs while using InPrivate browsing.”

No other details have been provided about the bug, but according to information that we received last month, pretty much all websites that you visit using the InPrivate mode are stored on the local drives, just like you’d be browsing in the standard mode. The purpose of InPrivate is to allow you to browse the web without having cookies or history logged on the PC, so all the data is removed when you end the session.

Cumulative update for Microsoft Edge

This month’s Patch Tuesday also brought a cumulative update for Microsoft Edge browser in the form of KB3134225, which includes critical fixes for a flaw that would allow attackers to gain control of an unpatched system.

“This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge. An attacker who successfully exploited the vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights,” Microsoft explains.

Certainly, getting more security updates for Edge browser is quite vital for the future of the app, especially because Microsoft touts it as one of the most secure choices on the market, but it still doesn’t fix its biggest problem: the lack of features.