Microsoft Edge Remote Code Execution Vulnerability

Release Date: 16 Jan 2025

RISK: Medium Risk

TYPE: Clients - Browsers

A vulnerability was identified in Microsoft Edge. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

 

 

---

Impact

• Remote Code Execution

---

System / Technologies affected

• Microsoft Edge Stable Channel version prior to 131.0.2903.146 and 131.0.2903.147

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to Microsoft Edge Stable Channel version 131.0.2903.146 or later

---

Vulnerability Identifier

• CVE-2025-0291

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#january-10-2025
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0291