ZDI-25-090: Microsoft Edge UI Misrepresentation Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-21404.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-090?
The ZDI-25-090 vulnerability has been assigned a CVSS rating indicating a critical severity level.
How do I fix ZDI-25-090?
To fix ZDI-25-090, ensure that you apply the latest updates released by Microsoft for Edge.
What type of attack does ZDI-25-090 facilitate?
ZDI-25-090 allows remote attackers to execute arbitrary code through a malicious webpage or file.
Is user interaction required to exploit ZDI-25-090?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file.
Which software is affected by ZDI-25-090?
ZDI-25-090 affects installations of Microsoft Edge.