CVE-2025-29815
CVSS 3.1 Score 7.6 of 10 (high)
Details
Summary
CVE-2025-29815 is a newly discovered vulnerability affecting Microsoft Edge, which is based on Chromium. Malicious actors can leverage this use-after-free issue to execute code over a network, giving them unauthorized access and control. This vulnerability poses a significant risk, particularly to organizations that rely on Microsoft Edge for web browsing, and could potentially lead to serious security breaches. Microsoft is encouraging users to install the latest security updates to protect against this exploit. Attackers must first gain authorized access to a target system to exploit this vulnerability. The exact conditions required to trigger the issue are still under investigation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Edge
Affected Vendors
- Microsoft