Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk

A Microsoft Edge design issue causes all saved passwords to be decrypted and held in process memory, enabling an attacker with admin/local access on shared or virtualized Windows environments to extract plaintext credentials via memory dumps. A researcher released a PoC showing how to exploit this; mitigations include disabling Edge password storage via group policy, using dedicated password managers, limiting admin privileges, and monitoring for memory-scraping behaviors.