Edge administrators can now set a severity threshold and receive alerts when a new Microsoft Edge browser update includes security fixes at or above that threshold, including zero-day fixes. This should help identify updates that may need attention and avoid notifications for routine releases.
Timeline
The rollout should be completed in October 2026.
How does this affect your organization?
This update affects users who already receive notifications about new Edge browser updates.
Until now, defined users received notifications for all new Edge updates (if enabled).
With this change, admins can choose a severity threshold. Notifications are then sent only for updates that include security fixes at or above the selected level, including zero-day fixes.
The security update notifications are part of Edge version monitoring in the Edge Management Service, introduced in June 2025.
Accounts with the Edge Administrator role should open the Microsoft 365 admin center > Settings > Microsoft Edge and select “Configure update notifications” if there is not already an update warning on the start page.
Administrators can choose between five levels:
- No notifications
- All updates (this was the current default setting if someone added an email address)
- High and above: high, critical, and zero-day vulnerabilities
- Critical and above: critical and zero-day vulnerabilities
- Zero-day vulnerabilities only
By default, the existing setup remains in place and users continue to be notified of all new Edge updates. Existing configurations are not changed. Admins who want fewer notifications need to select a severity threshold themselves.
No comments yet