By Design No More: Microsoft Edge Vv148.0 to Block Plaintext Password Scrapes from Process Memory

A researcher reported that Microsoft Edge loads cached user credentials as cleartext into active memory on startup. Microsoft initially declined to classify this as a vulnerability or issue a bug bounty because exploitation requires local, privileged execution, but announced an engineering remediation and has implemented a Canary fix to stop ingesting unencrypted credentials into volatile memory; the fix will be delivered in Edge v148.0 Stable.