Security baseline for Microsoft Edge version 117

We are pleased to announce the enterprise-ready release of the security baseline for Microsoft
Edge version 117!

We have reviewed the settings in Microsoft Edge version 117 and updated our guidance with the
addition of one setting. A new Microsoft Edge security baseline package was just released to the
Download Center. You can download the new package from the Security Compliance Toolkit.

Automatically open downloaded MHT or MHTML files from the web in Internet Explorer
mode (Added)

Automatically opening anything in Internet Explorer Mode is dangerous. An attacker on the
internet could exploit a vulnerability in legacy Internet Explorer code if they send the user a
MHT file and the user was configured to open MHT files in IE mode rather than Edge mode.
Therefore, we recommend the ‘Automatically open downloaded MHT or MHTML files from the
web in Internet Explorer mode” setting be Disabled.
Microsoft Edge version 117 introduces 12 new computer settings and 12 new user settings. We
have included a spreadsheet listing the new settings in the release to make it easier for you to
find them.

As a friendly reminder, all available settings for Microsoft Edge are documented here, and all
available settings for Microsoft Edge Update are documented here.

Please continue to give us feedback through the Security Baseline Community or in comments
on this post.