CVE-2025-21279

CVE-2025-21279 is a Remote Code Execution vulnerability affecting Microsoft Edge (Chromium-based). Published on 2025-02-06, it has a CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) and is associated with CWE-843 and NVD-CWE-noinfo.

Remote attackers can exploit this vulnerability over the network with low attack complexity and no privileges required, though user interaction is necessary. Successful exploitation enables high-impact confidentiality violations, such as unauthorized access to sensitive data, without affecting integrity or availability.

Microsoft has published an update guide with mitigation details for CVE-2025-21279 at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21279.