# MA-1123.082024: MyCERT Advisory - Security Updates- Microsoft Edge Browser

**Date:** 13 Aug 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1123.082024  
**Advisory ID:** MA-1123.082024

---

**1.0 Introduction**
Recently, Microsoft has released security updates to patch multiple vulnerability in the Edge browser.
**2.0 Impact**
These vulnerabilities could potentially allow an attacker to remote code execution (RCE) and memory corruption, leading to a compromise of the affected system.
**3.0 Affected Products**
- **CVE-2024-38218 (High) –**Memory corruption vulnerability exists in Microsoft Edge (HTML-based). Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the current user.
- **CVE-2024-38219 (Medium) –**A remote code execution vulnerability exists in Microsoft Edge (Chromium-based). Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the current user.
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review the [Microsoft MSRC Security Update Guide](https://msrc.microsoft.com/update-guide) and apply the necessary updates.
Kindly refer to the following URL: 
- <https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security>
Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0    References**
- <https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security>