Microsoft Edge: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.8
  CVE-2025-29795

  Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

  Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Edge Update Setup Browsers
  Mar 23, 2025
• Medium 6.5
  CVE-2025-29806

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft Edge (Chromium-based) Browsers
  Mar 23, 2025

Revision history

1. 2025-03-24 #2

   Ergänzung Produktversionen

2. 2025-03-23 #1

   Initiale Fassung

References

• Release notes for Microsoft Edge Security Updates vom 2025-03-23
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
• Microsoft Security Update Guide vom 2025-03-23
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29795
• Microsoft Security Update Guide vom 2025-03-23
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29806