CVE-2025-21408

CVE-2025-21408 is a Remote Code Execution vulnerability in Microsoft Edge, the Chromium-based web browser. Published on 2025-02-06, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is associated with CWE-843 and NVD-CWE-noinfo.

The vulnerability enables exploitation over a network with low attack complexity, requiring no privileges but user interaction, such as clicking a malicious link. Attackers can achieve high impacts on confidentiality, integrity, and availability, allowing remote code execution on affected systems.

Microsoft's Security Response Center update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21408 provides details on patches and mitigation steps.