Application (MS Edge | IE)

We provide a comprehensive list of vulnerabilities and remediation options on this page for our visitors’ reference. However, we would like to inform you that EireaNet, Inc. offers a free of charge automated mitigation service to our monthly subscribers. This service is designed to detect and remediate any vulnerabilities or other security issues on your system. Our mitigation service is constantly updated with the latest threats and vulnerabilities, ensuring that our subscribers are always protected against the latest security threats.

In addition to the automated mitigation service, EireaNet, Inc. also provides personalized consulting for businesses that require a more tailored approach to their security needs. Our team of experts can conduct thorough security assessments and provide customized recommendations to address specific vulnerabilities within your system. This personalized consulting service aims to empower businesses with the knowledge and tools to enhance their overall security posture and mitigate potential risks effectively.

We understand the critical importance of staying ahead of evolving security threats, which is why we remain dedicated to continuously updating our mitigation service and staying informed about emerging vulnerabilities. By offering both automated and personalized solutions, we aim to cater to the diverse security needs of our subscribers, ultimately contributing to a more secure digital environment for all.

Enable ‘Block third party cookies’

Description

Chrome allows cookies to be set by web page elements that are not from the domain in the user’s address bar. Enabling this feature prevents third party cookies from being set.

Potential risk

Blocking third party cookies can help protect a user’s privacy by eliminating a number of website tracking cookies.

Remediation options

Option 1 – Set the following Group Policy:
CComputer Configuration\Administrative Templates\Classic Administrative Template (ADM)\Microsoft\Edge\Block third party cookies
To the following value: Enabled

Option 2 – Set the following registry value:
HKLM\SOFTWARE\Policies\Microsoft\Edge\BlockThirdPartyCookies
To the following REG_DWORD value: 1

Disable running or installing downloaded software with invalid signature

Description

Determines whether downloaded software with invalid signature can be run or installed

Potential risk

An invalid signature might indicate that someone has tampered with the file, which could potentially enable an attacker to insert malicious code.

Remediation options

Option 1 – Set the following Group Policy:
Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page\Allow software to run or install even if the signature is invalid
To the following value: Disabled

Option 2 – Set the following registry value:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Download\RunInvalidSignatures
To the following REG_DWORD value: 0

Block outdated ActiveX controls for Internet Explorer

Description

This feature keeps ActiveX controls up to date and helps make them safer to use in Internet Explorer.

Potential risk

Many ActiveX controls are not automatically updated as new versions are released. It is very important to keep ActiveX controls up to date because malicious or compromised webpages can target security flaws in outdated ActiveX controls.

Remediation options

Option 1 – Set the following Group Policy:
Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management\Turn off blocking of outdated ActiveX controls for Internet Explorer
To the following value: Disabled

Option 2 – Set the following registry value:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\VersionCheckEnabled
To the following REG_DWORD value: 1