PoC tool extracts cleartext passwords from Microsoft Edge memory
A newly released proof-of-concept (PoC) tool shows how Microsoft Edge handles saved credentials, demonstrating that passwords may be exposed in cleartext within browser process memory. The researcher behind the tool, Tom Jøran Sønstebyseter Rønning, claims the behavior is longstanding and specific to Edge’s integration with Microsoft’s Password Manager. The issue was publicly discussed on X, … The post PoC tool extracts cleartext passwords from Microsoft Edge memory appeared first on CyberInsider.
A proof-of-concept tool demonstrates that Microsoft Edge loads all saved credentials into memory in cleartext, regardless of whether they are actively needed, making it vulnerable to extraction by an attacker with sufficient privileges.
Read the full article
This is a curated summary. The complete article is available at Cyber Insider.