Patched Microsoft Edge Flaw Could be Used for Covert Extension Installation

This flaw could have allowed an attacker to exploit a private API, initially intended for marketing purposes, to covertly install additional browser extensions with broad permissions without the user’s knowledge.