Vulnerability

CERT-In Vulnerability Note CIVN-2025-0299
Multiple Vulnerabilities in Microsoft Edge Stable (Chromium-based)

Original Issue Date:November 07, 2025

Severity Rating: HIGH

Software Affected

Microsoft Edge Stable Channel (Chromium-based) versions prior to 142.0.3595.65

Overview

Multiple vulnerabilities have been reported in Microsoft Edge Stable (Chromium-based) which could allow a remote attacker to execute arbitrary code or data manipulation on the targeted system.

Target Audience:
All end-user organizations and individuals using Microsoft Edge Stable (Chromium-based).

Risk Assessment:
High risk of remote code execution.

Impact Assessment:
Potential for data manipulation or service disruption.

Description

Microsoft Edge Stable (Chromium-based) is a web browser developed by Microsoft using the Chromium engine, offering fast performance, enhanced security, and compatibility with modern web standards while integrating with Microsoft services.

Multiple vulnerabilities exist in Microsoft Edge Stable (Chromium-based) due to Out of bounds write in WebGPU; Inappropriate implementation in Views and V8. A remote attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted web page.

Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code or data manipulation on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor.
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#november-5-2025

Vendor Information

Microsoft
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-12725
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-12726
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-12727

References

CVE Name
CVE-2025-12725
CVE-2025-12726
CVE-2025-12727

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India