CVE-2024-54092

A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 All versions, Industrial Edge Device Kit - arm64 V1.18 All versions, Industrial Edge Device Kit - arm64 V1.19 All versions, Industrial Edge Device Kit - arm64 V1.20 All versions V1.20.2-1, Industrial Edge Device Kit -...

Siemens Solid Edge

SUMMARY Solid Edge is affected by an out of bounds write vulnerability that could be triggered when the application is parsing XT data or a specially crafted file in XT format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the...

CVE-2025-29815

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

CVE-2025-29815

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

CVE-2025-29815

CVE-2025-29815 is a vulnerability in Microsoft Edge (Chromium-based) caused by a use-after-free in the browser. The issue enables a network-exposed remote code execution by an authorized attacker, with a CVSS v3.1 base score of 7.6 (High) and impact on confidentiality, integrity, and availability...

CVE-2025-25001 Microsoft Edge for iOS Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

PT-2025-14816 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a use after free condition in Microsoft Edge Chromium-based, allowing an authorized attacker to execute code over a network. Recommendations: A...

PT-2025-14814 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as 'cross-site scripting', which allows an unauthorized attacker to...

Microsoft Edge (Chromium) < 134.0.3124.93 (CVE-2025-2783)

The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.93. It is, therefore, affected by a vulnerability as referenced in the March 26, 2025 advisory. - Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to...

Microsoft Edge’s vulnerability relates to the improper handling of symbolic links before accessing a file. This allows attackers to exploit their privileges.

The vulnerability of Microsoft Edge relates to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-29795

CVE-2025-29795 describes an elevation-of-privilege vulnerability in Microsoft Edge (Chromium-based) due to improper link resolution before file access ("link following"). An authorized attacker could trigger local privilege escalation. The NVD entry assigns CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I...

CVE-2025-29806 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

CVE-2025-26643

CVE-2025-26643 affects Microsoft Edge (Chromium-based). Description: a spoofing vulnerability where the UI performs the wrong action, enabling a network-based spoofing possibility. CVSS v3.1 base score 5.4 (MEDIUM), vector AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, with user interaction required and ne...

CVE-2025-26643 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Chromium: CVE-2025-1923 Inappropriate Implementation in Permission Prompts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge UI Misrepresentation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Microsoft...

Microsoft Edge’s vulnerability, related to improper security checks for standard elements, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge relates to improper security checks for standard elements. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...