CVE-2025-25000

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Apr 4, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-250014.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorizCVE-2025-250025.7Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjaceCVE-2025-250037.3Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-250047.3Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.CVE-2025-250056.5Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.CVE-2025-250065.3Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a netwCVE-2025-250075.3Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over CVE-2025-250087.1Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locaCVE-2025-250095.4Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.CVE-2025-25017.8An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.CVE-2025-250106.5Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting_user role which incorrectly has the ability toCVE-2025-250117.0An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulne