CVE-2025-29834

Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2025-29834) is due to an out-of-bounds read in the browser, allowing an unauthenticated attacker to execute code over a network. Affected product: Microsoft Edge (Chromium-based). Vulnerable component: Edge/Chromium code han...

PT-2025-16158 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue involves an out-of-bounds read in Microsoft Edge Chromium-based, allowing an unauthorized attacker to execute code over a network. This can potentially enabl...

CVE-2024-54092

A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 All versions, Industrial Edge Device Kit - arm64 V1.18 All versions, Industrial Edge Device Kit - arm64 V1.19 All versions, Industrial Edge Device Kit - arm64 V1.20 All versions V1.20.2-1, Industrial Edge Device Kit -...

Siemens Solid Edge

SUMMARY Solid Edge is affected by an out of bounds write vulnerability that could be triggered when the application is parsing XT data or a specially crafted file in XT format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the...

CVE-2025-29815

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

CVE-2025-29815

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

CVE-2025-29815

CVE-2025-29815 is a vulnerability in Microsoft Edge (Chromium-based) caused by a use-after-free in the browser. The issue enables a network-exposed remote code execution by an authorized attacker, with a CVSS v3.1 base score of 7.6 (High) and impact on confidentiality, integrity, and availability...

CVE-2025-25001 Microsoft Edge for iOS Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

PT-2025-14814 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as 'cross-site scripting', which allows an unauthorized attacker to...

PT-2025-14816 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a use after free condition in Microsoft Edge Chromium-based, allowing an authorized attacker to execute code over a network. Recommendations: A...

Microsoft Edge (Chromium) < 134.0.3124.93 (CVE-2025-2783)

The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.93. It is, therefore, affected by a vulnerability as referenced in the March 26, 2025 advisory. - Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to...

Microsoft Edge’s vulnerability relates to the improper handling of symbolic links before accessing a file. This allows attackers to exploit their privileges.

The vulnerability of Microsoft Edge relates to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-29795

CVE-2025-29795 describes an elevation-of-privilege vulnerability in Microsoft Edge (Chromium-based) due to improper link resolution before file access ("link following"). An authorized attacker could trigger local privilege escalation. The NVD entry assigns CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I...

CVE-2025-29806 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

CVE-2025-26643

CVE-2025-26643 affects Microsoft Edge (Chromium-based). Description: a spoofing vulnerability where the UI performs the wrong action, enabling a network-based spoofing possibility. CVSS v3.1 base score 5.4 (MEDIUM), vector AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, with user interaction required and ne...

CVE-2025-26643 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Chromium: CVE-2025-1923 Inappropriate Implementation in Permission Prompts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...