Microsoft Edge is keeping your passwords in plaintext memory: Here’s what that actually means

### Executive summary: The report describes a disclosure showing Microsoft Edge loads all saved passwords into plaintext process memory at browser startup, creating a persistent extraction surface that infostealer malware or any process with user-session memory-read access (including an elevated admin on terminal servers) can harvest; mitigations recommended include avoiding Edge's built-in manager, using standalone password managers, deny-by-default allowlisting, and restricting execution and administrative privileges.