Cert-In-Advisories

[CIVN-2025-0247] Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

By TeamwinPublished On: October 9, 2025

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Microsoft Edge (Chromium-based)

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: HIGH

Software Affected

Microsoft Edge (Chromium-based) versions prior to 141.0.3537.57

Overview

Multiple vulnerabilities have been reported in Microsoft Edge (Chromium-based) which could allow a remote attacker to execute arbitrary code, bypass security restrictions, cause denial-of-service (DoS) or disclose sensitive information on the targeted system.

Target Audience:

All end-user organizations and individuals using Microsoft Edge (Chromium-based).

Risk Assessment:

High risk of remote code execution.

Impact Assessment:

Potential for unauthorized data access or service disruption.

Description

Microsoft Edge (Chromium-based) is a web browser developed by Microsoft using the Chromium engine, offering fast performance, enhanced security, and compatibility with modern web standards while integrating with Microsoft services.

Multiple vulnerabilities exist in Microsoft Edge (Chromium-based) due to Heap buffer overflow in WebGPU, Video; Side-channel information leakage in Storage, Tab; Inappropriate implementation in Media, Omnibox, Storage; Out of bounds read in Media, Off by one error in V8 and Use after free in V8. A remote attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted web page.

Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code, bypass security restrictions, cause denial-of-service (DoS) or disclose sensitive information on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor.

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#october-2-2025

Vendor Information

Microsoft

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11205

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11206

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11207

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11208

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11209

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11210

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11211

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11212

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11213

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11215

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11216

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11219

References