Not long after Google patched a publicly divulged zero-day vulnerability in Google Chrome, another one has appeared on the Google web browser.

Microsoft Edge claimed the win by a reasonably narrow margin with a total score of 76, based largely on a much stronger performance in the Encrypt Notes and OCR Scan test. Google Chrome finished. Open in Google Chrome extension is the WebExtension implementation of 'Open in Chrome' extension that opens the current tab or links in Google Chrome browser. Using this extension you can send links to Google Chrome without the need to manually copy and paste links.

• Mar 13, 2021 As Microsoft Edge is based on Chromium, starting with Microsoft Edge 94, they too are switching to a four-week cycle to match Chromium's releases, allowing Windows 10 users to get access to new.
• Open Edge and Import Your Data. Unless you want to start with a completely fresh slate, I recommend moving all your Chrome data over to Edge, so you can pick up your browsing where you left off.
• This will copy chrome bookmark file to Microsoft edge location. Step 2: Now open 'Task Scheduler' and create new task and setup trigger to 'Daily' every 15 minutes and set 'Action' to start a program and choose this (copybookmark.bat) file. Now this will copy all your chrome bookmarks to Microsoft edge on every 15 mins.

Apparently, the new zero-day vulnerability impacts the current versions of Google Chrome and possibly other browsers as well, like Microsoft Edge, that uses the Chromium framework.

What Is A Zero-Day Vulnerability?

The term “Zero-day” is an imaginative time, as this type of cyberattack happens in less than a day since the awareness of the security flaw. Thereby, not giving developers ample time to eradicate or mitigate the potential risks associated with this vulnerability.

The exploit was first noticed on Wednesday by a user on Twitter who goes by the name frust. The tweet also included a link to a GitHub page containing JavaScript for a proof-of-concept web page that will use the vulnerability.

“>

another chrome 0dayhttps://t.co/QJy24ARKlU
Just here to drop a chrome 0day. Yes you read that right.

— frust (@frust93717815) April 14, 2021

As frust showed in a YouTube video, the web page will open Windows Notepad in Chrome or an associated browser. If it can do that, it can do anything the user does. Other Chromium-derived desktop browsers, such as Brave, Opera, and Vivaldi are also in danger.

The researcher stated that the exploit worked in Chrome version 89.0.4389.128, which was released on April 13.

According to a published report from Recorded Future, as with previous zero-day flaws, threat actors would still need to escape the Chrome browser “sandbox,” a security feature preventing browser-specific code from reaching the basic operating system, to complete full Remote Code Execution (RCE).

The newly-found exploit can’t harm users in its current state since it isn’t able to escape the Sandbox, but if it were to be combined with another attack, maybe through a separate malware infection able to disable the browser sandboxing, then victims would get infected.

According to BleepingComputer, the new zero-day vulnerability runs by launching the current versions of Google Chrome and Microsoft Edge using the –no-sandbox argument, which deactivates the sandbox security function. Once the sandbox is disabled, the flaw could launch Notepad on Google Chrome 89.0.4389.128 and Microsoft Edge 89.0.774.76, which are the newest versions of both browsers.

Antivirus is no longer enough to keep an organization’s systems secure.

• Machine learning powered scans for all incoming online traffic;
• Stops data breaches before sensitive info can be exposed to the outside;
• Advanced DNS, HTTP and HTTPS filtering for all your endpoints;
• Protection against data leakage, APTs, ransomware and exploits;

Google was planned to release Chrome 90 for Desktop on April 13th, but instead released the new version of Chrome to fix the zero-day vulnerability released on Monday.

Meantime, you need to know what to do to protect yourself and your devices from this new zero-day vulnerability. It’s true, it isn’t much you can do about it at this moment, but if you are worried you can use Firefox or Safari instead.

WebDriver allows developers to create automated tests that simulate user interaction. WebDriver tests and simulations differ from JavaScript unit tests in the following ways.

• Accesses functionality and information not available to JavaScript running in browsers.
• Simulates user events or OS-level events more accurately.
• Manages multiple windows, tabs, and webpages in a single test session.
• Runs multiple sessions of Microsoft Edge on a specific machine.

The following section describes how to get started with WebDriver for Microsoft Edge (Chromium).

Microsoft Edge And Chrome Keep Crashing

Install Microsoft Edge (Chromium)

Ensure you install Microsoft Edge (Chromium). To confirm that you have Microsoft Edge (Chromium) installed, navigate to edge://settings/help, and verify the version number is version 75 or later. Microsoft remote app mac.

Download Microsoft Edge Driver

To begin automating tests, use the following steps to ensure that the WebDriver version you install matches your browser version.

1. Find your version of Microsoft Edge.

   1. Navigate to edge://settings/help.

2. Navigate to Microsoft Edge Driver.

3. Navigate to Get the latest version.

4. Choose the build of channel that matches your version number of Microsoft Edge.

   The Get the latest version section on the Microsoft Edge Driver webpage

Choose a WebDriver language binding

The last component you must download is a language-specific client driver to translate your code (Python, Java, C#, Ruby, JavaScript) into commands the Microsoft Edge Driver runs in Microsoft Edge (Chromium).

Download the WebDriver language binding of your choice. The Microsoft Edge team recommends Selenium 4.00-alpha07 or later, because it supports Microsoft Edge (Chromium). However, you may control Microsoft Edge (Chromium) in all older versions of Selenium, including the current stable Selenium 3 release.

Important

If you previously automated or tested Microsoft Edge (Chromium) using ChromeDriver and ChromeOptions classes, your WebDriver code does not run on Microsoft Edge Version 80 or later. To solve the problem, update your tests to use the EdgeOptions class and download Microsoft Edge Driver.

Use Selenium 3

If you already use Selenium 3, you may have existing browser tests and want to add coverage for Microsoft Edge (Chromium) without changing your version of Selenium. To use Selenium 3 to write automated tests for both Microsoft Edge (EdgeHTML) and Microsoft Edge (Chromium), install the Selenium Tools for Microsoft Edge package to use the updated driver. The EdgeDriver and EdgeDriverService classes included in the tools are fully compatible with the built-in equivalents in Selenium 4.

Use the following steps to add the Selenium Tools for Microsoft Edge and Selenium 3 to your project.

Add the Microsoft.Edge.SeleniumTools and Selenium.WebDriver packages to your .NET project using the NuGet CLI or Visual Studio.

Microsoft Edge And Chrome Comparison

Use pip to install the msedge-selenium-tools and selenium packages.

If your Java project uses Maven, copy and paste the following dependency to your pom.xml file to add msedge-selenium-tools-java.

The Java package is also available to download directly on the Selenium Tools for Microsoft Edge Releases page.

Use npm to install the edge-selenium-tools and selenium-webdriver packages.

Automate Microsoft Edge (Chromium) with WebDriver

To automate a browser using WebDriver, you must first start a WebDriver session using your preferred WebDriver language binding. A session is a single running instance of a browser controlled using WebDriver commands. Start a WebDriver session to launch a new browser instance. The launched browser instance remains open until you close the WebDriver session.

The following content walks you through using Selenium to start a WebDriver session with Microsoft Edge (Chromium). You may run the examples using either Selenium 3 or 4. To use with Selenium 3, the Selenium Tools for Microsoft Edge package must be installed.

Automate Microsoft Edge (Chromium)

Selenium uses the EdgeDriver class to manage a Microsoft Edge (Chromium) session. To start a session and automate Microsoft Edge (Chromium), create a new EdgeDriver object and pass it an EdgeOptions object with the UseChromium property set to true.

The EdgeDriver class only supports Microsoft Edge (Chromium), and doesn't support Microsoft Edge (EdgeHTML). For basic usage, you may create an EdgeDriver without providing EdgeOptions.

Note

If your IT admin has set the DeveloperToolsAvailability policy to 2, Microsoft Edge Driver is blocked from driving Microsoft Edge (Chromium), because the driver uses the Microsoft Edge DevTools. Ensure the DeveloperToolsAvailability policy is set to 0 or 1 to automate Microsoft Edge (Chromium).

Choose Specific Browser Binaries (Chromium-Only)

You may start a WebDriver session with specific Microsoft Edge (Chromium) binaries. For example, you may run tests using the Microsoft Edge preview channels such as Microsoft Edge Beta.

Customize the Microsoft Edge Driver Service

When you use the EdgeOptions class to create an EdgeDriver class instance, it creates and launches the appropriate EdgeDriverService class for either Microsoft Edge (EdgeHTML) or Microsoft Edge (Chromium).

If you want to create an EdgeDriverService, use the CreateChromiumService() method to create one configured for Microsoft Edge (Chromium). The CreateChromiumService() method is useful when you need to add customizations. For example, the following code starts verbose log output.

Note

Microsoft Edge And Chrome

You do not need to provide the EdgeOptions object when you pass EdgeDriverService to the EdgeDriver instance. The EdgeDriver class uses the default options for either Microsoft Edge (EdgeHTML) or Microsoft Edge (Chromium) based on the service you provide.
However, if you want to provide both EdgeDriverService and EdgeOptions classes, ensure that both are configured for the same version of Microsoft Edge. For example, you may use a default Microsoft Edge (EdgeHTML) EdgeDriverService class and Chromium properties in the EdgeOptions class. The EdgeDriver class throws an error to prevent using different versions.

When you use Python, the Edge object creates and manages the EdgeService. To configure the EdgeService, pass extra arguments to the Edge object as indicated in the following code.

Use the createDefaultService() method to create an EdgeDriverService configured for Microsoft Edge (Chromium). Use Java system properties to customize driver services in Java. For example, the following code uses the 'webdriver.edge.verboseLogging' property to turn on verbose log output.

When you use JavaScript, create and configure a Service with the ServiceBuilder class. Optionally, you may pass the Service object to the Driver object, which starts (and stops) the service for you.
To configure the Service, run another method in the ServiceBuilder class before you use the build() method. Then pass the service as a parameter in the Driver.createSession() method.

Use Chromium-Specific Options

If you set the UseChromium property to true, you may use the EdgeOptions class to access the same Chromium-specific properties and methods that are used when you automate other Chromium browsers.

Note

If the UseChromium property is set to true, you are not able to use properties and methods for Microsoft Edge (EdgeHTML).

Other WebDriver installation options

Chocolatey

If you use Chocolatey as your package manager, run the following command to install the Microsoft Edge Driver.

For more information, navigate to Selenium Chromium Edge Driver on Chocolatey.

Docker

If you use Docker, run the following command to download a pre-configured image with Microsoft Edge (Chromium) and Microsoft Edge Driver pre-installed.

For more information, navigate to the msedgedriver container on Docker Hub.

Next steps

For more information about WebDriver and how to write automated WebDriver tests using Selenium, navigate to the Selenium documentation.

Getting in touch with the Microsoft Edge DevTools team

Microsoft Edge And Chrome Extensions

The Microsoft Edge team is eager to hear your feedback about using WebDriver, Selenium, and Microsoft Edge. To send the team your questions and comments, choose the Send Feedback icon in the Microsoft Edge DevTools or send a tweet @EdgeDevTools.