CVE-2025-29796 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2025-29796 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2025-29815 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2025-29815 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2025-29815

CVE-2025-29815 is a vulnerability in Microsoft Edge (Chromium-based) caused by a use-after-free in the browser. The issue enables a network-exposed remote code execution by an authorized attacker, with a CVSS v3.1 base score of 7.6 (High) and impact on confidentiality, integrity, and availability...

CVE-2025-25001 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2025-25001 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2025-25001

CVE-2025-25001 affects Microsoft Edge (Chromium-based); the issue is an improper neutralization of input during web page generation (XSS) that enables spoofing over a network. Affected product: Microsoft Edge (Chromium-based), including Edge for iOS. Root cause: input handling during page generat...

Microsoft Edge (Chromium) < 135.0.3179.54 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 135.0.3179.54. It is, therefore, affected by multiple vulnerabilities as referenced in the April 3, 2025 advisory. - Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows a...

CVE-2025-29815: Use After Free

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

CVE-2025-29796: User Interface (UI) Misrepresentation of Critical Information

User interface ui misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25001: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25000

CVE-2025-25000 affects Microsoft Edge (Chromium-based). The vulnerability is a type confusion error described as access of a resource using an incompatible type that could allow an unauthorized attacker to execute code over a network. The connected sources confirm affected product and the remote ...

CVE-2025-25000 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2025-25000 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Chromium: CVE-2025-3074 Inappropriate implementation in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-3073 Inappropriate implementation in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-3072 Inappropriate implementation in Custom Tabs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-3071 Inappropriate implementation in Navigations

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-3070 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...