Microsoft Edge Multiple Vulnerabilities

Release Date: 30 May 2025

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, denial of service condition, data manipulation and remote code execution on the targeted system.

---

Impact

• Remote Code Execution
• Denial of Service
• Information Disclosure
• Data Manipulation

---

System / Technologies affected

• Microsoft Edge Stable Channel version prior to 137.0.3296.52
• Microsoft Edge Extended Stable Channel prior to 136.0.3240.104

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to Microsoft Edge Stable Channel version 137.0.3296.52 or later
• Update to Microsoft Edge Extended Stable Channel version 136.0.3240.104 or later

---

Vulnerability Identifier

• CVE-2025-5063
• CVE-2025-5064
• CVE-2025-5065
• CVE-2025-5066
• CVE-2025-5067
• CVE-2025-5280
• CVE-2025-5281
• CVE-2025-5283

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#may-29-2025
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5063
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5064
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5065
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5066
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5067
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5280
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5281
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5283