CVE-2025-29795: Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
Overview
- Severity
- High (CVSS 7.8)
- CVSS Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- Category
- Elevation of Privilege
- Exploit Status
- Not Exploited
- Exploitation Likelihood
- Less Likely
- Patch Tuesday
- 2025-Mar
- Released
- 2025-03-21
- EPSS Score
- 0.62% (percentile: 70.1%)
Description
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
FAQ
What privileges could be gained by an attacker who successfully exploited the vulnerability?
The attacker would gain the rights of the user that is running the affected application.
Affected Products (1)
Browser
- Microsoft Edge Update Setup
Acknowledgments
<a href="https://twitter.com/sim0nsecurity">Simon (@sim0nsecurity)</a>
Revision History
- 2025-03-21: Information published.