Google has revealed a critical security flaw in Microsoft Edge browser
Microsoft and Google already have several disagreements over security vulnerability disclosure in recent years.
Technology giant, Google has now made public the details of a medium-level security flaw in Microsoft Edge browser whose patch is yet to be developed. The vulnerability was first discovered in November 2017, by the search giant's Project Zero.

According to Engadget, taking advantage of the flaw, hackers can bypass Microsoft Edge's existing security measures to inject malicious code into a victim's computer. Google, through its Project Zero, notified Microsoft about a bug in November, giving the company the usual 90-day disclosure deadline.
With the three-month deadline over, the team of security analysts employed by Google tasked with finding zero-day vulnerabilities - Project Zero - went public with the details of the security flaw. The search giant granted a 14-day extension to Microsoft after it said that the problem was complex and it needed more time to fix it.
But, Microsoft even missed the second deadline to produce the patch of the vulnerability. However, given Edge's small market share, the security issue was unlikely to affect too many people though it is still embarrassing for the company.
Late last year, Microsoft in a blog post had detailed bugs found within Chrome browser. It also criticized Google for its approach to fixing the bugs, while also making the details public.
According to Microsoft, Google "made the vulnerability obvious, especially as it came with a regression test". In addition to this, the stable channel of Chrome was kept vulnerable to the RCE exploit for about a month before releasing the fix to users.
Meanwhile, Microsoft in a separate instance has announced that it is ending support for all push notifications for Windows Phone 7.5 and Windows Phone 8.0 devices starting from Tuesday. "Windows Phone 7.5 and Windows Phone 8.0 have reached their end of support dates and thus services for these versions of Windows will be discontinued over time," the company wrote in a blog post.
Once the support ends, the device running on these versions of the Windows operating systems would no longer receive notifications and additional live tile updates, as well as the "Find my phone" feature, would no longer locate a users smartphone.

Microsoft has spared device running Windows 8.1 and 10 mobile. "Notification services will continue to function for Windows Phone 8.1 at this time and newer phones running Windows 10 Mobile are still fully supported," the company added. Last year in July, Microsoft ended all support to Windows Phone 8.1 and millions of devices running on this operating system.
Inputs from IANS


Click it and Unblock the Notifications