Security News > 2021 > June > Microsoft Translation Bugs Open Edge Browser to Trivial UXSS Attacks
Microsoft patched two bugs in its Chromium-based Edge browser last week, one of which could be used by an attacker to bypass security and to remotely inject and execute arbitrary code on any website just by sending a message.
The flaw stems from a universal cross-site scripting issue that's triggered when automatically translating web pages using the Edge browser's built-in Microsoft Translator feature: a feature through which the browser automatically prompts users to translate a webpage when the page is in a language other than those listed under the user's preferred languages in settings.
As explained by the analysts who found and reported the bug, an UXSS is unlike your more run-of-the-mill XSS attacks in that it "Exploits client-side vulnerabilities in the browser or browser extensions in order to generate an XSS condition" and to execute malicious code.
Ru website in Microsoft Edge and to test it one last time, given that Edge had a newly updated Translator By Microsoft feature.
"We found out that as soon as we translated [the] page we got so many popups on Microsoft Edge it looked strange," they explained, so they flipped back over to Google's Chrome browser.
PoC: Just a Facebook Comment & a Dab of XSS Payload. In the proof-of-concept shown below on Facebook, the researchers demonstrated how to trigger the attack simply by adding a comment to a Facebook video that's written in a language other than English, along with an XSS payload. Windows Store applications, such as Instagram, are also vulnerable to the attack, they added, given that the Windows Store uses the same Microsoft Edge Translator that can trigger this UXSS attack.
News URL
https://threatpost.com/microsoft-edge-browser-uxss-attacks/167389/
Related news
- Microsoft overhauls security for publishing Edge extensions (source)
- DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks (source)
- Microsoft and DOJ disrupt Russian FSB hackers' attack infrastructure (source)
- Microsoft Edge begins testing Copilot Vision (source)
- Microsoft issues 117 patches – some for flaws already under attack (source)
- Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks (source)
- Firefox Zero-Day Under Attack: Update Your Browser Immediately (source)
- Microsoft: Ransomware Attacks Growing More Dangerous, Complex (source)
- Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser (source)
- VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware (source)