CVE-2025-21262

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Jan 24, 2025
Updated: Feb 7, 2025
CWE ID 451

Summary

CVE-2025-21262 is a UI misrepresentation vulnerability affecting Microsoft Edge, the Chromium-based web browser. Maliciously crafted web content can manipulate critical information displayed to users, leading to potential spoofing attacks over a network. An attacker can exploit this flaw to deceive users into believing they are interacting with a trusted source, potentially stealing sensitive information or performing unauthorized actions. The exact cause of the issue is still under investigation, but users are advised to keep their browser up-to-date with the latest patches to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Edge Chromium

Affected Vendors

  • Microsoft