CVE-2025-49741 - Vulnerability Details - OpenCVE

No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Microsoft	Edge Chromium

Configuration 1 [-]

cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49741

History

Wed, 16 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00084}`	epss `{'score': 0.00062}`

Tue, 08 Jul 2025 17:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-268

Tue, 08 Jul 2025 15:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft Microsoft edge Chromium
CPEs		cpe:2.3:a:microsoft:edge_chromium::::::::
Vendors & Products		Microsoft Microsoft edge Chromium

Wed, 02 Jul 2025 14:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-200
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 01 Jul 2025 22:30:00 +0000

Type	Values Removed	Values Added
Description		No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Title		Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
References		https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49741
Metrics		cvssV3_1 `{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C'}`

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2025-07-01T22:22:07.595Z

Updated: 2025-08-05T18:12:52.977Z

Reserved: 2025-06-09T22:49:37.618Z

Link: CVE-2025-49741

Vulnrichment

Updated: 2025-07-02T13:21:34.537Z

NVD

Status : Modified

Published: 2025-07-01T23:15:30.587

Modified: 2025-07-08T17:16:03.223

Link: CVE-2025-49741

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-49741", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2025-06-09T22:49:37.618Z", "datePublished": "2025-07-01T22:22:07.595Z", "dateUpdated": "2025-08-05T18:12:52.977Z"}, "containers": {"cna": {"title": "Microsoft Edge (Chromium-based) Information Disclosure Vulnerability", "datePublic": "2025-07-01T07:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*", "versionStartIncluding": "1.0.0.0", "versionEndExcluding": "135.0.3179.98"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based)", "platforms": ["Unknown"], "versions": [{"version": "1.0.0.0", "lessThan": "135.0.3179.98", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-268: Privilege Chaining", "lang": "en-US", "type": "CWE", "cweId": "CWE-268"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-08-05T18:12:52.977Z"}, "references": [{"name": "Microsoft Edge (Chromium-based) Information Disclosure Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49741"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "HIGH", "baseScore": 7.4, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C"}}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-02T13:21:10.445662Z", "id": "CVE-2025-49741", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-02T13:21:46.649Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-49741", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-02T13:21:10.445662Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-02T13:21:34.537Z"}}], "cna": {"title": "Microsoft Edge (Chromium-based) Information Disclosure Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based)", "versions": [{"status": "affected", "version": "1.0.0.0", "lessThan": "135.0.3179.98", "versionType": "custom"}], "platforms": ["Unknown"]}], "datePublic": "2025-07-01T07:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49741", "name": "Microsoft Edge (Chromium-based) Information Disclosure Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-268", "description": "CWE-268: Privilege Chaining"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "135.0.3179.98", "versionStartIncluding": "1.0.0.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-08-05T18:12:52.977Z"}}}, "cveMetadata": {"cveId": "CVE-2025-49741", "state": "PUBLISHED", "dateUpdated": "2025-08-05T18:12:52.977Z", "dateReserved": "2025-06-09T22:49:37.618Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2025-07-01T22:22:07.595Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}