Microsoft Edge Stores All Saved Passwords in Cleartext Process Memory at Launch

A security researcher discovered that Microsoft Edge decrypts and stores all saved passwords in cleartext process memory upon launch, leaving them vulnerable to extraction by attackers with access to the system’s memory. This behavior contrasts sharply with Chrome's on-demand decryption approach, making it a significant risk in shared or multi-user environments where administrative privileges can be exploited to harvest credentials from multiple users simultaneously.

Read the full article at Cyber Security News

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.