VDB
CVE-2025-21399
CVE-2025-21399
PUBLISHED
Es besteht eine Schwachstelle in Microsoft Edge. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um Systemprivilegien zu erlangen. Um diese Schwachstelle auszunutzen, müsste ein Angreifer zusätzliche Schritte unternehmen, um die Zielumgebung vorzubereiten und Informationen zu sammeln, bevor er sie ausnutzen kann.
EPSS 0.19% · 41.1th percentile
Risk Scores
EPSS Score
0.19%
41.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Edge <132.0.2957.115 | |
| IGEL | IGEL OS |
Exploit Intelligence
- https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)
- https://www.vicarius.io/vsociety/posts/elevation-of-privilege-vulnerability-in-microsoft-edge-chromium-based-detection-script (nist-nvd)
- https://www.vicarius.io/vsociety/posts/elevation-of-privilege-vulnerability-in-microsoft-edge-chromium-based-mitigation-script (nist-nvd)
- CIRCL seen: CVE-2025-21399 (circl-sighting)
- CIRCL seen: CVE-2025-21399 (circl-sighting)
- CIRCL seen: CVE-2025-21399 (circl-sighting)
- CIRCL seen: CVE-2025-21399 (circl-sighting)
- CIRCL seen: CVE-2025-21399 (circl-sighting)
- Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability (circl)
Timeline
- Jan 14, 2025 CVE Published
- Jan 16, 2025 CVE Updated
- Jan 17, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 18, 2025 EPSS Score
- Jan 18, 2025 PoC Published
- Feb 2, 2025 EPSS Score
- Feb 6, 2025 Coalition ESS Score
- Feb 18, 2025 EPSS Score
- Mar 4, 2025 Coalition ESS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0120.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0120 advisory
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#january-17-2025 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21185 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21399 advisory
- https://kb.igel.com/security-safety/current/isn-2025-04-microsoft-edge-vulnerabilities advisory