HomeWinBuzzer NewsGoogle Project Zero Exposes Microsoft Edge Vulnerability

Google Project Zero Exposes Microsoft Edge Vulnerability

A week after finding a zero-day vulnerability in Windows 10, Google Project Zero is reporting on another flaw, this time in Internet Explorer and Microsoft Edge.


's services are the subject of a Project Zero revelation again. A week after finding a zero-day vulnerability in Windows about a week ago, the analysts found a problem with Internet Explorer and Edge. The vulnerability has been labeled with a high severity level.

Project Zero is Google's division that is made up of a team of security analysts. The remit of the team is to find zero-day vulnerabilities. Google opened the division in 2015 and warns software providers of any vulnerabilities found in their products.

The team is full-time and dedicated to looking for vulnerabilities in Google's software and beyond. Project Zero gives companies 90 days to patch the problem. If a fix has not been made available within the limit, the team publicly announces it. Google says the system is created to develop responsibility amongst software makers.

A new IE and Edge vulnerability has been named CVE-2017-0037. The team says this vulnerability is a confusion flaw in the module in IE and . It could allow arbitrary code to be executed.

informed Microsoft of the problem on November 25th. However, the company did not release a fix, so the vulnerability was revealed publicly on February 25. Microsoft has yet to respond, but it will be interesting to see if the company is readying a fix.

Google Project Zero and Microsoft

This is the second vulnerability found in Microsoft services in the space of a week. Google Project Zero reported on a problem in , located in the gdi32.dll file. Again, Microsoft was informed 90 days ago, in November, but did not issue a fix. The company has yet to respond.

While the technical details are simply too boring for a casual read, those interested enough to trudge through programming jargon can read the full report here.

Luke Jones
Luke Jones
Luke has been writing about all things tech for more than five years. He is following Microsoft closely to bring you the latest news about Windows, Office, Azure, Skype, HoloLens and all the rest of their products.

Recent News