Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CNVD-2025-23051)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security feature bypass vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to cause a security feature bypass...

(0Day) Microsoft Edge PDF NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of lin...

Microsoft Edge (Chromium) < 138.0.3351.121 (CVE-2025-8292)

The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.121. It is, therefore, affected by a vulnerability as referenced in the July 31, 2025 advisory. - Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to...

CVE-2025-47964

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2025-47182

Improper input validation in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...

CVE-2025-47964 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2025-47182 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2025-47182

CVE-2025-47182 affects Microsoft Edge (Chromium-based) and is caused by improper input validation. The vulnerability enables an authorized, locally scoped attacker to bypass a security feature, resulting in potential elevation of privileges with the integrity impact high and confidentiality uncha...

CVE-2025-40740

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the curre...

CVE-2025-40741

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 5. The affected applications contain a stack based overflow vulnerability while parsing specially crafted CFG files. This could allow an attacker to execute code in the context of the current process...

CVE-2025-40741

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 5. The affected applications contain a stack based overflow vulnerability while parsing specially crafted CFG files. This could allow an attacker to execute code in the context of the current process...

CVE-2025-40741

Siemens Solid Edge SE2025 prior to V225.0 Update 5 is affected by a stack-based overflow while parsing specially crafted CFG files. The issue is triggered during CFG file processing and can allow code execution in the context of the current process. Vulnerable component is the CFG file parser; ro...

CVE-2025-40740

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the curre...

CVE-2025-40740

Siemens Solid Edge SE2025 is affected by CVE-2025-40740, an out-of-bounds read when parsing specially crafted PAR files, allowing code execution in the current process. Affected product: Solid Edge SE2025 (all versions before V225.0 Update 5). Root cause: out-of-bounds read past the end of an all...

CVE-2025-40739

Summary (CVE-2025-40739) : Siemens Solid Edge SE2025 prior to V225.0 Update 5 contains an out-of-bounds read while parsing specially crafted PAR files, which can lead to code execution in the process context. This vulnerability affects Solid Edge SE2025 versions before the Update 5 release. Accor...

PT-2025-28397 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2025 versions prior to V225.0 Update 5 Description: A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR...

The vulnerability of Google Chrome and Microsoft Edge browsers allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of Google Chrome and Microsoft Edge browsers is related to the use of unreliable input data during security decision-making. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information by downloadin...

ROS-20250703-07

A vulnerability in the DevTools component of the Google Chrome browser is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the libvpx library of the Google Chrome and Microsoft Edge...

PT-2025-27664

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue allows an unauthorized attacker to execute code over a network due to a 'type confusion' vulnerability in Microsoft Edge Chromium-based, enabling remote code...

PT-2025-27016 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper input validation, allowing an authorized attacker to bypass a security feature locally. This is a security-feature bypass vulnerabilit...