Microsoft Patches Edge IE Mode After Hackers Exploited Chakra Zero-Day for Device Takeover

Microsoft has patched Edge IE Mode after hackers exploited a Chakra zero‑day to seize control of devices. The Chakra JavaScript engine flaw in IE9, IE10 and IE11 was used in phishing-driven workflows that pushed users to enable IE Mode within Edge, enabling attackers to launch the exploit and, in later stages, escalate privileges and escape the browser sandbox. In response, Microsoft has updated the IE Mode access policy to require a more deliberate process to enable IE Mode for accessing certain sites.

The change comes as Internet Explorer reached end of support in 2022, but IE Mode remains available in Edge to maintain compatibility for some government and enterprise sites. From August 2025, threat intelligence reports indicated deceptive phishing sites prompting users to switch to IE Mode, which could be abused to compromise devices; as a mitigation, users must manually configure IE Mode in Edge settings and add the target domain before access is allowed. The update does not apply to enterprise environments, where IT admins can continue to manage IE Mode through group policies.