Edge and IE get enhanced protection against the latest CPU security bugs

2 minute read
CPU security bugs fix

Home » News » Edge and IE get enhanced protection against the latest CPU security bugs

Google’s Project Zero recently revealed that Intel, AMD and ARM CPUs are vulnerable to JavaScript malicious codes running in the browser, which may allow attackers to access computer memory.

Microsoft quickly reacted to this news, rolling out a series of patches to both Windows 7 and Windows 10 aimed specifically at fixing these security vulnerabilities.

The Redmond giant also took additional steps to make sure that Edge and Internet Explorer become bullet proof to such threats.

Edge and IE block Meltdown and Spectre bugs

More specifically, Microsoft made changes to the behavior of supported versions of the Edge and Internet Explorer 11 browsers in order to block the attackers’ ability to successfully read memory through side-channel attacks.

The first step that Microsoft took was to remove support for SharedArrayBuffer and reduce the resolution of the performance.now web API.

The company confirmed that these two changes make it more difficult for attackers to interfere with the content of the CPU cache from a browser process.

Initially, we are removing support for SharedArrayBuffer from Microsoft Edge (originally introduced in the Windows 10 Fall Creators Update), and reducing the resolution of performance.now() in Microsoft Edge and Internet Explorer from 5 microseconds to 20 microseconds, with variable jitter of up to an additional 20 microseconds.

Microsoft will operate more changes in the coming months, as it continues to evaluate the impact of the recent CPU vulnerabilities.

We will re-evaluate SharedArrayBuffer for a future release once we are confident it cannot be used as part of a successful attack.

This recent CPU vulnerability disclosure confirms once again the importance of regularly updating your computer. So, if you haven’t installed the latest Windows updates on your computer yet, go to Settings > Updates & Security > click on the ‘Check for updates’ button and install the available updates.

RELATED STORIES TO CHECK OUT:

Discussions

Next up

My printer and phone wont connect: 4 steps to fix it

Tashreef Shareef avatar. By: Tashreef Shareef
2 minute read

The modern wireless printers allow users to print using their phone and computer wirelessly. Sometimes, that dynamic duo might not work as printer and phone […]

Continue Reading

4 reliable share market software to keep track of your stocks

Vladimir Popescu avatar. By: Vladimir Popescu
Less than a 1 minute read

Because trading stocks is a hard area of business as it is, getting some help when it comes to coordination of stocks and help with […]

Continue Reading

Power BI visual errors? Fix them with our best solutions

Alexandru Voiculescu By: Alexandru Voiculescu
3 minute read

Visualization is crucial in Power BI. Therefore, this feature should run smoothly. But this is not always the case. Many users reported various visual errors […]

Continue Reading