CVE-2025-49741: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

PriorityP258high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EXPLOIT

EPSS

3.38%

87.4th percentile

No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	edge_chromium	< 135.0.3179.98	135.0.3179.98
microsoft	microsoft_edge	>= 1.0.0.0 < 135.0.3179.98	135.0.3179.98
msrc	microsoft_edge	—	—

Detection & IOCsextracted from sources · hover to see the quote

urlhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/2025/CVE-2025-49741↗

·The published exploit is described as a simulation/demonstration and does NOT perform real exploitation; real-world attack mechanics may differ from the proof-of-concept. ↗
·Microsoft's exploit status indicates the vulnerability has NOT been observed exploited in the wild as of the advisory date, reducing immediate urgency but not eliminating risk. ↗

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vendor_msrc7.4HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.