Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Inappropriate implementation vulnerability in Omnibox can be exploited to cause denial of service.
2. Heap buffer overflow vulnerability in Video can be exploited to cause denial of service.
3. Inappropriate implementation vulnerability in Media can be exploited to cause denial of service.
4. Side-channel information leakage vulnerability in Tab can be exploited to obtain sensitive information.
5. Heap buffer overflow vulnerability in WebGPU can be exploited to cause denial of service.
6. Side-channel information leakage vulnerability in Storage can be exploited to obtain sensitive information.
7. Use after free vulnerability in V8 can be exploited to cause denial of service or execute arbitrary code.
8. Out of bounds read vulnerability in Media can be exploited to cause denial of service.
9. Inappropriate implementation vulnerability in Storage can be exploited to cause denial of service.
10. Off by one error vulnerability in V8 can be exploited to cause denial of service.

Original advisories

• CVE-2025-11209

• CVE-2025-11206
• CVE-2025-11208
• CVE-2025-11210
• CVE-2025-11205
• CVE-2025-11212
• CVE-2025-11207
• CVE-2025-11219
• CVE-2025-11211
• CVE-2025-11216
• CVE-2025-11213
• CVE-2025-11215

Related products

• Microsoft-Edge

CVE list

• CVE-2025-11209
  unknown
• CVE-2025-11215
  warning
• CVE-2025-11210
  high
• CVE-2025-11207
  unknown
• CVE-2025-11216
  high
• CVE-2025-11211
  unknown
• CVE-2025-11206
  high
• CVE-2025-11205
  critical
• CVE-2025-11213
  high
• CVE-2025-11219
  warning
• CVE-2025-11212
  high
• CVE-2025-11208
  high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com