Chromium: CVE-2025-8880 Race in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-8879 Heap buffer overflow in libaom

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The Edge of Agency: Defending Against the Risks of Agentic AI

...

Microsoft Edge (Chromium) < 139.0.3405.102 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 139.0.3405.102. It is, therefore, affected by multiple vulnerabilities as referenced in the August 15, 2025 advisory. - Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to...

Linux Distros Unpatched Vulnerability : CVE-2025-49763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted. Users can u...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CNVD-2025-23049)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android, which can be exploited by attackers to conduct spoofing attacks when visiting specially crafted websites...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CNVD-2025-23048)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android. An attacker can exploit this vulnerability to conduct spoofing attacks when visiting specially crafted websit...

Microsoft Edge (Chromium) < 138.0.3351.140 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.140. It is, therefore, affected by multiple vulnerabilities as referenced in the August 15, 2025 advisory. - Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to...

KLA86735 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Aura can be exploited to cause denial of service or execu...

MAL-2025-7838 Malicious code in @epc-infra/edge-stack (npm)

The package @epc-infra/edge-stack was found to contain malicious code...

Malicious code in @epc-infra/edge-stack (npm)

The package @epc-infra/edge-stack was found to contain malicious code...

Malicious code in service-edge (npm)

The package service-edge was found to contain malicious code...

MAL-2025-19218 Malicious code in edge-ai-tuning-kit (npm)

The package edge-ai-tuning-kit was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-33011 Malicious code in service-edge (npm)

The package service-edge was found to contain malicious code...

Malicious code in edge-ai-tuning-kit (npm)

The package edge-ai-tuning-kit was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-27707

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-27576

Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an unauthenticated user to potentially enable denial of service via local access...

CVE-2025-24840

Improper access control for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-49755

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-27250

Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...