CVE-2025-21399

Summary

Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

Affected Software

Weaknesses

• CWE-426: CWE-426: Untrusted Search Path

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://www.vicarius.io/vsociety/posts/elevation-of-privilege-vulnerability-in-microsoft-edge-chromium-based-detection-script
• https://www.vicarius.io/vsociety/posts/elevation-of-privilege-vulnerability-in-microsoft-edge-chromium-based-mitigation-script

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21399

• ←Previous
• Next→