Microsoft Edge Plaintext Password Storage Memory Exposure | MSSP Advisory

Microsoft Edge converts all saved passwords to plaintext in memory immediately upon browser startup, exposing them to malware with memory access capabilities or forensic tools. Any system running Edge with saved passwords creates an attack surface where credential harvesting requires only memory dumping techniques. The vulnerability exists as long as the browser process runs, regardless of whether users actively browse websites.

Your clients running Edge with saved passwords create an instant credential exposure risk that bypasses traditional password manager protections. If malware hits any client environment, attackers can dump Edge memory and harvest plaintext credentials for every saved account, including business applications and admin portals. Your RMM agents and remote access tools become compromised if technicians save credentials in Edge on endpoints you manage.

📬