SB2025012727 - Multiple vulnerabilities in Microsoft Edge

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Spoofing attack (CVE-ID: CVE-2025-21262)

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data. A remote attacker can trick the victim into opening a specially crafted file and perform spoofing attack.

2) Buffer overflow (CVE-ID: CVE-2025-0612)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary error in V8 in Google Chrome. A remote attacker can trick the victim to visit a specially crafted webpage, trigger a stack-based buffer overflow and execute arbitrary code on the system.

3) Buffer overflow (CVE-ID: CVE-2025-0611)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary error in V8 in Google Chrome. A remote attacker can trick the victim to visit a specially crafted webpage, trigger memory corruption and execute arbitrary code on the system.

Remediation

Install update from vendor's website.

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21262
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-0612
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-0611