Researcher says Microsoft Edge has inherited many of Internet Explorer’s security holes

Leonhard argues that nothing of that sort happened. In fact, he says that with edge we were promised that Edge will do a better job defending against malicious websites and fake sites; will bid farewell to ActiveX, VB Script, Toolbars, BHOs and VMLs; and will have secure extensions, app container sandboxing, MemGC garbage collection to protect against user-after-free attacks, Visual Studio’s Control Flow Guard, and many other advanced technologies.

Leohard writes that Patch Tuesday released by Microsoft yesterday and last month confirms his belief that Edge is carrying forward the IE vulnerabilities.

“The reason for my skepticism: Common Vulnerabilities and Exposures (CVEs). Each CVE entry is supposed to identify a unique security hole. The overlap between Internet Explorer CVEs and Edge CVEs shows that many security problems in IE have been inherited by Edge.”

In yesterdays Patch Tuesday, Microsoft claims to have plugged 15 CVE holes.

Leonhard says that, “I took a look at the official CVE list for Edge and compared it with the similar list for Internet Explorer. There are 14 identified CVEs for Microsoft Edge. Of those, 13 are also identified security holes for Internet Explorer.”

He rounds up with his article stating that Edge seems to improve on certain areas but is far from being the most secure browser of them all.