What is CVE-2025-21408?

CVE-2025-21408 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Which CVE IDs does CVE-2025-21408 cover?

CVE-2025-21408 covers the following CVE IDs: CVE-2025-21408. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2025-21408?

CVE-2025-21408 has a CVSS v3 base score of 8.8, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2025-21408?

CVE-2025-21408 affects 1 product, including: Microsoft Edge (Chromium-based).

CVE-2025-21408HighCVSS 8.8

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

June 3, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-21408 →

📋 Description

According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution? Successful exploitation of this vulnerability requires the victim user to click a malicious link so that the attacker can initiate remote code execution on the renderer process.

What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 133.0.3065.51 2/6/2025 133.0.6943.53/54

🎯 Affected products1

Microsoft Edge (Chromium-based)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 133.0.3065.51

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21408
referencehttps://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security