Graded Desktop Software Browsers

The following browsers contribute to grading the Desktop Software risk vector:

• Chrome
• Edge
• Firefox
• Internet Explorer
• Safari

All other operating systems are evaluated as “NEUTRAL.”

Chrome

Google releases a new version of the browser every four weeks. Biweekly updates are released to provide stability and security patches, When used within a ChromeOS environment, specific LTS versions are also available.

Version Details:

• https://chromium.googlesource.com/chromium/src/+/master/docs/process/release_cycle.md
• https://chromereleases.googleblog.com/search/label/Desktop%20Update

Edge

Microsoft provides a 4-week major release cycle cadence. They support the three most recent stable channel releases and the latest beta channel release. The effective assisted support duration for a stable channel release is approximately 12 weeks.

Microsoft also offers an extended stable option with an 8-week major release cycle. They support the two most recent extended stable channel releases. The effective assisted support duration for an extended stable channel release is approximately 16 weeks.

• Website: https://www.microsoft.com/edge
• Version Details:
  • https://learn.microsoft.com/en-us/deployedge/microsoft-edge-support-lifecycle
  • https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel
  • https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-beta-channel

Firefox

Mozilla provides a new version of the browser every four weeks. They also provide an Extended Support Release (ESR) with security patches made available for at least one year after the release.

Version Details:

• https://www.mozilla.org/en-US/firefox/new
• https://wiki.mozilla.org/Release_Management/Release_Process
• https://wiki.mozilla.org/Release_Management/Calendar
• https://support.mozilla.org/en-US/kb/firefox-esr-release-cycle

Internet Explorer

Microsoft has discontinued Internet Explorer but still provides security updates to the latest version.

Website: https://www.microsoft.com/en-us/download/internet-explorer

Safari

Apple does not provide an official statement regarding the lifecycle support for Safari. They have been actively supporting at least the last version of the browser when that version can be updated on the latest three macOS versions, as Safari is an integral component of the operating system and not a standalone installable product. When a new Safari version is reported on their security announcements, we need to verify which macOS versions are supported and confirm it mentions the previous two versions - the current macOS version will update automatically.

• Website: https://www.apple.com/safari
• Version Details:
  • https://developer.apple.com/documentation/safari-release-notes
  • https://support.apple.com/en-us/HT201624