Microsoft Edge Multiple Vulnerabilities

Release Date: 17 Feb 2025

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, security restriction bypass, sensitive information disclosure and spoofing on the targeted system.

---

Impact

• Denial of Service
• Remote Code Execution
• Security Restriction Bypass
• Information Disclosure
• Spoofing

---

System / Technologies affected

• Microsoft Edge Stable Channel version prior to 133.0.3065.69

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to Microsoft Edge Stable Channel version 133.0.3065.69 or later

---

Vulnerability Identifier

• CVE-2025-0995
• CVE-2025-0996
• CVE-2025-0997
• CVE-2025-0998
• CVE-2025-21401

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#february-14-2025
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0995
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0996
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0997
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0998
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21401