Microsoft Edge Security Update – 16 February 2025

The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary code and gain access to the affected systems by persuading the victim to visit a specially crafted website.

Sample of the addressed vulnerabilities:

1. Microsoft Edge (Chromium-based) Code Execution Vulnerability (CVE-2025- 0997):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access

2. Microsoft Edge (Chromium-based) Security Bypass Vulnerability (CVE-2025- 0996):

• CVSS: 6.5
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Security Bypass