Severity
High
Analysis Summary
CVE-2025-29795 CVSS:7.8
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2025-29806 CVSS:6.5
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Impact
- Privilege Escalation
- Code Execution
Indicators of Compromise
CVE
CVE-2025-29795
CVE-2025-29806
Affected Vendors
- Microsoft
Affected Products
- Microsoft Edge (Chromium-based) - 1.0.0
- Microsoft Edge Update Setup - 1.0.0.0
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.