CVE-2025-47182: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Overview

Severity

Medium (CVSS 5.6)

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C

Category

Edge - Chromium

Exploit Status

Not Exploited

Patch Tuesday

2025-Jun

Released

2025-06-26

EPSS Score

0.17% (percentile: 38.3%)

Description

Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.

FAQ

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? To successfully exploit this vulnerability, an attacker would need existing ability to execute Javascript in the impacted process. According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability? This vulnerability could lead to a browser sandbox escape. What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 138.0.3351.55 6/26/2025 138.0.7204.49/.50

Affected Products (1)

Browser

• Microsoft Edge (Chromium-based)

Acknowledgments

raven at Kunlun Lab

Revision History

• 2025-06-26: Information published.