First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-21279

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Edge (Chromium-based)	>= 1.0.0.0, < 133.0.3065.51

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21279Vendor Advisory

Timeline

Published: Feb 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-21286.5The Cost Calculator Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_ids’ parameter in all versions up CVE-2025-212805.5Windows Virtual Trusted Platform Module Denial of Service Vulnerability CVE-2025-212817.8Microsoft COM for Windows Elevation of Privilege Vulnerability CVE-2025-212828.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-212838.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2025-212845.5Windows Virtual Trusted Platform Module Denial of Service Vulnerability CVE-2025-212857.5Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability CVE-2025-212868.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-212877.8Windows Installer Elevation of Privilege Vulnerability CVE-2025-212886.5Windows COM Server Information Disclosure Vulnerability CVE-2025-212897.5Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability CVE-2025-21295.6A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to

CVE-2025-21279: High severity, CVSS 8.8 | Vulnix