Annoying 'Open PDF In Edge' Default Option Puts Windows 10 Users At Risk (softpedia.com)

An anonymous reader writes from a report via Softpedia: Microsoft fixed today a serious security flaw in the Windows PDF Library, a standard library used by Windows 10 to open and render PDF files, embedded by default in Edge. Exploiting this flaw allows attackers to execute code on the user's machine and take over the device, just by tricking a user into accessing a PDF hosted online via Edge. Since Edge is not only the default browser in Windows 10, but also the default PDF reader, this flaw puts countless of users that have not changed those settings at risk. Even worse, Microsoft has the annoying habit of resetting your personal app preferences once in a blue moon, always reverting Edge as the default browser and the default app to open PDF files.

Comments

At risk of what??

[FrankHaynes]

At risk of opening a PDF? Why not automatically open the PDF in protected mode? Surely Edge is advanced enough not to open a PDF with full access permissions to running macros and such?? I mean, Edge can even do WebRTC so at long last Microsoft is catching up to the rest of the world. Surely security considerations can't be far behind. Right? GUYS??

Re:Microsoft is relentless in being obnoxious late

[HouseOfMisterE]

It could be worse, they could flag your preferred program as incompatible and helpfully uninstall it for you.