Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CNVD-2025-23063)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security feature bypass vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to bypass certain features...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CNVD-2025-23064)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an elevation of privilege vulnerability, which can be exploited by attackers to access sensitive user data when visiting specially crafted...

Microsoft Edge (Chromium-Based) < 133.0.3065.82 Multiple Vulnerabilities (Feb 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-21401

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2025-21401

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2025-21401 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2025-21401 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2025-0862 SuperSaaS – online appointment scheduling <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via after Parameter

The SuperSaaS – online appointment scheduling plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘after’ parameter in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-0862 SuperSaaS – online appointment scheduling <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via after Parameter

The SuperSaaS – online appointment scheduling plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘after’ parameter in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-0862

CVE-2025-0862 describes a stored cross-site scripting flaw in the WordPress plugin SuperSaaS – online appointment scheduling . Affected versions up to and including 2.1.12 allow an authenticated attacker with Contributor+ privileges to inject arbitrary scripts via the after parameter, which execu...

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2025-23065)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

CVE-2025-21279

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2025-21267

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2025-21404

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2025-21342

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2025-21408

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2025-21408

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2025-21404

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2025-21279

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2025-21404

Microsoft Edge Chromium-based Spoofing Vulnerability...