CVE-2025-21404

Summary

CVE-2025-21404 is a new spoofing vulnerability affecting Microsoft Edge browsers based on Chromium. Maliciously crafted web content can manipulate the address bar display, potentially deceiving users into believing they are on a trusted site. This security flaw can lead to phishing attacks and data breaches. Attackers can exploit this vulnerability by setting the address bar to display a false URL, even if the user lands on a different webpage. Microsoft is working on a patch to address this issue. Users are advised to keep their browsers updated to protect against potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.