US EditionMicrosoft Restricts IE Mode Access in Edge After Zero-Day Attacks
Microsoft removed high-risk IE mode access points and requires explicit enabling per site to prevent exploits using unpatched Internet Explorer vulnerabilities, protecting millions of Edge users.
- This year Microsoft revamped Edge's IE mode, removing the toolbar button, context menu, and hamburger menu to close high-risk entry points.
- Microsoft Edge security team recently received intelligence that threat actors abused IE mode this year by targeting legacy web technologies and the Chakra JavaScript engine to bypass Chromium safeguards.
- Attackers tricked users into reloading pages in IE mode via spoofed websites and on-page flyouts, then exploited Chakra and a second exploit for privilege escalation, Microsoft said last week.
- Microsoft recommends migrating from legacy web technologies and reviewing IE mode settings, as successful exploits allow hackers to install malware, move laterally, exfiltrate data, and seize device control.
- Internet Explorer 11 reached end of life on June 15, 2022, but IE mode remains for legacy support; Microsoft said `This approach ensures that the decision to load web content using legacy technology is significantly more intentional` and left enterprise policies unchanged.
19 Articles
19 Articles
Microsoft restricts IE mode after hackers exploit zero-day flaw
Microsoft has tightened access to Internet Explorer (IE) mode in its Microsoft Edge browser after discovering that hackers were exploiting a critical zero-day vulnerability to take control of users’ computers.
Microsoft Forced To Restrict A Handy Edge Feature After Hackers Exploit It As A Backdoor
Microsoft Edge users will now have to jump through a few extra hoops to access the browser’s Internet Explorer (IE) Mode. This is because the Edge browser security team was recently made aware that compatibility mode was being abused by threat actors to gain unauthorized access to devices. IE Mode exists as a way for Edge users to access
Legacy IE Mode in Edge Opens Door to Hackers
In August 2025, cybersecurity researchers uncovered a sophisticated hacking campaign exploiting Microsoft Edge’s Internet Explorer (IE) mode to compromise users’ devices. By leveraging social engineering and zero-day vulnerabilities within IE’s outdated Chakra JavaScript engine, threat actors successfully bypassed modern browser protections. This discovery highlights the persistent risks of maintaining legacy compatibility features in today’s …
Microsoft drastically restricted access to Internet Explorer mode in Edge following attacks. Hackers used zero-day faults in the old IE engine to take control of PC. Quick access buttons are removed, making mode activation much more complex and deliberate.
Coverage Details
Bias Distribution
- 34% of the sources lean Left, 33% of the sources are Center, 33% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
