Security baseline for Microsoft Edge version 117

We are pleased to announce the enterprise-ready release of the security baseline for Microsoft

Edge version 117!

We have reviewed the settings in Microsoft Edge version 117 and updated our guidance with the

addition of one setting. A new Microsoft Edge security baseline package was just released to the

Download Center. You can download the new package from the Security Compliance Toolkit.

Automatically open downloaded MHT or MHTML files from the web in Internet Explorer

mode (Added)

Automatically opening anything in Internet Explorer Mode is dangerous. An attacker on the

internet could exploit a vulnerability in legacy Internet Explorer code if they send the user a

MHT file and the user was configured to open MHT files in IE mode rather than Edge mode.

Therefore, we recommend the ‘Automatically open downloaded MHT or MHTML files from the

web in Internet Explorer mode” setting be Disabled.

Microsoft Edge version 117 introduces 12 new computer settings and 12 new user settings. We

have included a spreadsheet listing the new settings in the release to make it easier for you to

find them.

As a friendly reminder, all available settings for Microsoft Edge are documented here, and all

available settings for Microsoft Edge Update are documented here.

Please continue to give us feedback through the Security Baseline Community or in comments

on this post.

Continue reading...