Microsoft Edge Security Update – 19 January 2025

The addressed vulnerabilities could allow the remote attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, or gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Microsoft Edge Buffer Overflow Vulnerability (CVE-2025-0434):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access

2. Microsoft Edge Elevation of Privilege Vulnerability (CVE-2025-21185):

• CVSS: 6.5
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Privilege