Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Security UI vulnerability can be exploited to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) Update can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Extensions Google Chrome can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Navigation Google Chrome can be exploited remotely to gain privileges.
6. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service.
7. Type confusion vulnerability in V8 can be exploited to cause denial of service.
8. Information disclosure vulnerability in Fenced Frames Google Chrome can be exploited to obtain sensitive information.
9. Heap buffer overflow vulnerability in Google Chrome can be exploited to cause denial of service.
10. Heap buffer overflow vulnerability in Tracing Google Chrome can be exploited to cause denial of service.

Original advisories

• CVE-2025-0439

• CVE-2025-21399
• CVE-2025-0443
• CVE-2025-21185
• CVE-2025-0448
• CVE-2025-0447
• CVE-2025-0446
• CVE-2025-0440
• CVE-2025-0436
• CVE-2025-0435
• CVE-2025-0434
• CVE-2025-0442
• CVE-2025-0441
• CVE-2025-0437
• CVE-2025-0438

Related products

• Microsoft-Edge

CVE list

• CVE-2025-0439
  high
• CVE-2025-0435
  high
• CVE-2025-0436
  critical
• CVE-2025-0434
  critical
• CVE-2025-0443
  critical
• CVE-2025-0437
  critical
• CVE-2025-0440
  high
• CVE-2025-0448
  unknown
• CVE-2025-0438
  critical
• CVE-2025-0441
  high
• CVE-2025-0447
  critical
• CVE-2025-0446
  warning
• CVE-2025-0442
  high
• CVE-2025-21399
  high
• CVE-2025-21185
  high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com