Multiple vulnerabilities in Microsoft Browser

Descripción

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Security UI vulnerability can be exploited to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) Update can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Extensions Google Chrome can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Navigation Google Chrome can be exploited remotely to gain privileges.
6. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service.
7. Type confusion vulnerability in V8 can be exploited to cause denial of service.
8. Information disclosure vulnerability in Fenced Frames Google Chrome can be exploited to obtain sensitive information.
9. Heap buffer overflow vulnerability in Google Chrome can be exploited to cause denial of service.
10. Heap buffer overflow vulnerability in Tracing Google Chrome can be exploited to cause denial of service.

Notas informativas originales

• CVE-2025-0439

• CVE-2025-21399
• CVE-2025-0443
• CVE-2025-21185
• CVE-2025-0448
• CVE-2025-0447
• CVE-2025-0446
• CVE-2025-0440
• CVE-2025-0436
• CVE-2025-0435
• CVE-2025-0434
• CVE-2025-0442
• CVE-2025-0441
• CVE-2025-0437
• CVE-2025-0438

Explotación

Public exploits exist for this vulnerability.

Productos relacionados

• Microsoft-Edge

Lista CVE

• CVE-2025-0439
  high
• CVE-2025-0435
  high
• CVE-2025-0436
  critical
• CVE-2025-0434
  critical
• CVE-2025-0443
  critical
• CVE-2025-0437
  critical
• CVE-2025-0440
  high
• CVE-2025-0448
  warning
• CVE-2025-0438
  critical
• CVE-2025-0441
  high
• CVE-2025-0447
  critical
• CVE-2025-0446
  warning
• CVE-2025-0442
  high
• CVE-2025-21399
  high
• CVE-2025-21185
  high

Lista KB

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com