Microsoft Edge Multiple Vulnerabilities

Release Date: 19 Nov 2025

RISK: Extremely High Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution on the targeted system.

 

Note:

CVE-2025-13223 is being exploited in the wild. The vulnerability is caused by a type confusion weakness in the Chrome V8 JavaScript engine and can lead to remote code execution on targeted device.

---

Impact

• Remote Code Execution

---

System / Technologies affected

• Microsoft Edge version prior to 142.0.3595.90

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 142.0.3595.90 or later

---

Vulnerability Identifier

• CVE-2025-13223
• CVE-2025-13224

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#november-18-2025
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13223
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13224