| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-235754 | CAT II | MONT-WS-92040 | Microsoft Edge Security Technical Implem... | Extensions installation must be blocklisted by def... | - | |||
Check TextThe policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Control which extensions cannot be installed" must be set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 If the value for "1" is not set to "REG_SZ = *", this is a finding. Fix TextSet the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Control which extensions cannot be installed" to "Enabled". A list of blocklisted extensions may then be specified. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4097A18D2792A95FE262E20A225523C05426B446 ~~~~~ 'Control which extensions cannot be installed' is Enabled (With '*' added to the list) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist Value Name: 1 Value: * Type: REG_SZ
Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_MSEdge_V2R3_20251023-142313.ckl
Scan Date: 2026-01-14T12:57:25.750497
Technology Area: Windows Operating System
|
||||||||
| V-235754 | CAT II | MONT-WS-92010 | Microsoft Edge Security Technical Implem... | Extensions installation must be blocklisted by def... | - | |||
Check TextThe policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Control which extensions cannot be installed" must be set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 If the value for "1" is not set to "REG_SZ = *", this is a finding. Fix TextSet the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Control which extensions cannot be installed" to "Enabled". A list of blocklisted extensions may then be specified. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4097A18D2792A95FE262E20A225523C05426B446 ~~~~~ 'Control which extensions cannot be installed' is Enabled (With '*' added to the list) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist Value Name: 1 Value: * Type: REG_SZ
Source: _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_MSEdge_V2R3_20251023-141013.ckl
Scan Date: 2026-01-14T12:57:28.003629
Technology Area: Windows Operating System
|
||||||||
| V-235754 | CAT II | MONT-SW-89108 | Microsoft Edge Security Technical Implem... | Extensions installation must be blocklisted by def... | - | |||
Check TextThe policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Control which extensions cannot be installed" must be set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 If the value for "1" is not set to "REG_SZ = *", this is a finding. Fix TextSet the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Control which extensions cannot be installed" to "Enabled". A list of blocklisted extensions may then be specified. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4097A18D2792A95FE262E20A225523C05426B446 ~~~~~ 'Control which extensions cannot be installed' is Enabled (With '*' added to the list) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist Value Name: 1 Value: * Type: REG_SZ
Source: MONT-SW-89108_MSEdge_V2R3_20251217-202829.ckl
Scan Date: 2026-03-04T15:25:16.059827
Technology Area: Windows Operating System
|
||||||||
| V-235754 | CAT II | MONT-SW-89134 | Microsoft Edge Security Technical Implem... | Extensions installation must be blocklisted by def... | - | |||
Check TextThe policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Control which extensions cannot be installed" must be set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist\1 If the value for "1" is not set to "REG_SZ = *", this is a finding. Fix TextSet the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Extensions/Control which extensions cannot be installed" to "Enabled". A list of blocklisted extensions may then be specified. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4097A18D2792A95FE262E20A225523C05426B446 ~~~~~ 'Control which extensions cannot be installed' is Enabled (With '*' added to the list) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist Value Name: 1 Value: * Type: REG_SZ
Source: MONT-SW-89134_MSEdge_V2R3_20251217-201011.ckl
Scan Date: 2026-03-04T15:25:42.078580
Technology Area: Windows Operating System
|
||||||||