Skip to content
OpenAdvisories
High WID-SEC-2025-0710 4 CVEs

Microsoft Edge: Mehrere Schwachstellen

Published Apr 3, 2025 · Updated Apr 3, 2025 · de-DE

Vendor: Microsoft Product: Edge Platform: iOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Cross-Site-Scripting durchzuführen oder Dateien zu manipulieren.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 4

  • High 8.8
    CVE-2025-25000

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • High 7.6
    CVE-2025-29815

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Medium 4.7
    CVE-2025-29796

    Microsoft Edge for iOS Spoofing Vulnerability

    User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft Edge for iOS iOS Browsers
  • Medium 4.3
    CVE-2025-25001

    Microsoft Edge for iOS Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft Edge for iOS iOS Browsers

Revision history

  1. #1

    Initiale Fassung

References