PT-2024-10288 · Microsoft · Edge

Oruga · Published 2024-12-11 · Updated 2025-07-03 · CVE-2025-21399

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Edge (Chromium-based) (affected versions not specified)

Description The issue concerns an elevation of privilege vulnerability in Microsoft Edge. This vulnerability may allow an attacker to elevate their privileges, potentially leading to unauthorized actions on the system, exposure of sensitive information, and system compromise. No specific details about affected devices or real-world incidents are provided. Technical details about exploitation are not mentioned.

Recommendations Update Microsoft Edge: Immediately apply the latest security patches from Microsoft. Monitor Your Systems: Keep an eye on system logs for any signs of suspicious activity. Strengthen Security Configurations: Ensure your browser's security settings are optimized to fend off threats.

Exploit

Fix

LPE

Untrusted Search Path

Weakness Enumeration

CWE-426

CWE-273

Related Identifiers

BDU:2025-00696

CVE-2025-21399

Affected Products

Edge

References · 18

• 🔥 https://vicarius.io/vsociety/posts/elevation-of-privilege-vulnerability-in-microsoft-edge-chromium-based-detection-script · Exploit
• 🔥 https://vicarius.io/vsociety/posts/elevation-of-privilege-vulnerability-in-microsoft-edge-chromium-based-mitigation-script · Exploit
• https://osv.dev/vulnerability/CVE-2025-21399 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21399 · Security Note
• https://bdu.fstec.ru/vul/2025-00696 · Security Note
• https://twitter.com/StreetWalker212/status/1887748409831891224 · Twitter Post
• https://twitter.com/CVEnew/status/1880384719470149677 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1880401781802308038 · Twitter Post
• https://twitter.com/xvonfers/status/1880561496721371223 · Twitter Post
• https://reddit.com/r/u_davidkellett0305/comments/1ijbjhi/secure_your_digital_edge_with_ki_computing_llc · Reddit Post
• https://vuldb.com/?id.292461 · Note
• https://t.me/cvenotify/109348 · Telegram Post
• https://twitter.com/digital_const/status/1888586364658094397 · Twitter Post
• https://twitter.com/vuldb/status/1880491696783520204 · Twitter Post