CVE-2025-21262

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

User Interface (UI) Misrepresentation of Critical Information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-451

Affected software

No affected versions have been published.

Timeline

Published
Jan 24, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-212636.6Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-212647.1Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature localCVE-2025-212656.6Windows Digital Media Elevation of Privilege VulnerabilityCVE-2025-212668.8Windows Telephony Service Remote Code Execution VulnerabilityCVE-2025-212674.4Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2025-212684.3MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-212694.3Windows HTML Platforms Security Feature Bypass VulnerabilityCVE-2025-21276.1A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown functioCVE-2025-212707.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2025-212717.8Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2025-212726.5Windows COM Server Information Disclosure VulnerabilityCVE-2025-212738.8Windows Telephony Service Remote Code Execution Vulnerability