Tracing Component XSS

The vulnerability of the Tracing component in Google Chrome and Microsoft Edge is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created HTML page...

Fenced Frames Data Compromise Protection

The vulnerability of the Privacy-Fenced Frames function in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially...

Extensions Component Bypass Substitution

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface...

Google Chrome Microsoft Edge UI Substitution

The vulnerability of the Frames component in Google Chrome and Microsoft Edge involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface with a specially created HTML page...

Skia XSS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created HTML page...

Payments Component Bypass UI

The vulnerability of the Payments component in Google Chrome and Microsoft Edge involves exploiting authentication bypass techniques. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface with a specially created HTML pa...

Google Chrome Navigation UI Bypass

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface with a specially created HTML...

Metrics component Code Execution

The vulnerability of the Metrics component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

Compositing Component UI Replacement

The vulnerability of the Compositing component in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

Google Chrome Navigation Privilege Escalation

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

Microsoft Edge (Chromium-Based) Spoofing Vulnerability (Jan 2025)

Microsoft Edge Chromium-Based is prone to a spoofing vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Edge Privilege Escalation

The vulnerability of Microsoft Edge is related to access control errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Microsoft Edge (Chromium) < 132.0.2957.127 (CVE-2025-21262)

The version of Microsoft Edge installed on the remote Windows host is prior to 132.0.2957.127. It is, therefore, affected by a vulnerability as referenced in the January 24, 2025 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2025-21262 Note that Nessus has not tested for th...

KLA79352 DoS vulnerabilities in Microsoft Browser

Denial of service vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service. Original advisories CVE-2025-0611 CVE-2025-0612 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list...

CVE-2025-21262

User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-21262

User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-21262 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2025-21262 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2025-21262

Microsoft Edge (Chromium-based) is affected by CVE-2025-21262 (UI spoofing). The vulnerability concerns misrepresentation of UI information in the browser, enabling a network-based attacker to perform spoofing. Affected product: Microsoft Edge (Chromium-based); vulnerable component/function: User...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...