Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Security UI vulnerability can be exploited to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) Update can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Extensions Google Chrome can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Navigation Google Chrome can be exploited remotely to gain privileges.
6. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service.
7. Type confusion vulnerability in V8 can be exploited to cause denial of service.
8. Information disclosure vulnerability in Fenced Frames Google Chrome can be exploited to obtain sensitive information.
9. Heap buffer overflow vulnerability in Google Chrome can be exploited to cause denial of service.
10. Heap buffer overflow vulnerability in Tracing Google Chrome can be exploited to cause denial of service.

Original advisories

• CVE-2025-0439

• CVE-2025-21399
• CVE-2025-0443
• CVE-2025-21185
• CVE-2025-0448
• CVE-2025-0447
• CVE-2025-0446
• CVE-2025-0440
• CVE-2025-0436
• CVE-2025-0435
• CVE-2025-0434
• CVE-2025-0442
• CVE-2025-0441
• CVE-2025-0437
• CVE-2025-0438

Related products

• Microsoft-Edge

CVE list

• CVE-2025-0439
  warning
• CVE-2025-0435
  warning
• CVE-2025-0436
  warning
• CVE-2025-0434
  warning
• CVE-2025-0443
  warning
• CVE-2025-0437
  critical
• CVE-2025-0440
  warning
• CVE-2025-0448
  warning
• CVE-2025-0438
  warning
• CVE-2025-0441
  warning
• CVE-2025-0447
  warning
• CVE-2025-0446
  warning
• CVE-2025-0442
  warning
• CVE-2025-21399
  warning
• CVE-2025-21185
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com