CVE-2025-21262
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2025-21262 is a UI misrepresentation vulnerability affecting Microsoft Edge, the Chromium-based web browser. Maliciously crafted web content can manipulate critical information displayed to users, leading to potential spoofing attacks over a network. An attacker can exploit this flaw to deceive users into believing they are interacting with a trusted source, potentially stealing sensitive information or performing unauthorized actions. The exact cause of the issue is still under investigation, but users are advised to keep their browser up-to-date with the latest patches to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Edge Chromium
Affected Vendors
- Microsoft