CVE-2025-25000: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Other sources
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 135.0.3179.54
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25000?
CVE-2025-25000 is classified as a critical severity vulnerability due to its potential to allow unauthorized code execution.
How do I fix CVE-2025-25000?
To fix CVE-2025-25000, users should update Microsoft Edge to the latest version beyond 135.0.3179.54.
What version of Microsoft Edge is affected by CVE-2025-25000?
CVE-2025-25000 affects Microsoft Edge (Chromium-based) versions up to 135.0.3179.54.
What type of vulnerability is CVE-2025-25000?
CVE-2025-25000 is characterized as a type confusion vulnerability, which can lead to resource access issues.
Is CVE-2025-25000 exploitable over the network?
Yes, CVE-2025-25000 can be exploited over the network, allowing attackers to execute arbitrary code.