CVE-2025-65046: Microsoft edge chromium authentication bypass by spoofing vulnerability

Microsoft · Edge Chromium

Microsoft Edge (Chromium-based) Spoofing Vulnerability

3.1 CVSS 3.1 Low EPSS 0.28% · top 81.7% CWE-451 · CWE-451CWE-290 · Authentication bypass by spoofing

3.1CVSS 3.1 base score

0.28%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

1References

17 Jun 2026Last modified by NVD

Description

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Edge Chromium Microsoft

References

Link	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65046	Vendor Advisory

Track CVE-2025-65046 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.6CVE-2023-6345Chrome Skia integer overflow enables sandbox escapeAn integer overflow in Skia in Google Chrome before 119.0.6045.199 lets a remote attacker who already controls the renderer process escape the browse…KEVEPSS 16%analysed29 Nov 2023 9.6CVE-2022-4135Google Chrome GPU heap buffer overflow enables sandbox escapeChrome's GPU component contains a heap buffer overflow (CWE-787) fixed in version 107.0.5304.121. An attacker who already controls the renderer proce…KEVEPSS 32%analysed25 Nov 2022 8.8CVE-2025-14174Google Chrome ANGLE out-of-bounds memory access on MacChrome on macOS before 143.0.7499.110 contains an out-of-bounds memory access in the ANGLE graphics layer, classified as an out-of-bounds write (CWE-…KEVEPSS 22%analysed12 Dec 2025 8.8CVE-2025-5419Google Chrome V8 out-of-bounds read and write enables heap corruptionV8 in Google Chrome before 137.0.7151.68 contains an out-of-bounds read and write that a remote attacker can trigger with a crafted HTML page, leadin…KEVEPSS 7.8%analysed3 Jun 2025 8.8CVE-2024-7965Google Chrome V8 inappropriate implementation allows heap corruptionGoogle Chrome before 128.0.6613.84 contains an inappropriate implementation in the V8 JavaScript engine that can lead to heap corruption. The flaw is…KEVEPSS 19%analysed21 Aug 2024 8.8CVE-2023-5217libvpx VP8 encoding heap buffer overflow exploited via crafted HTMLA heap buffer overflow in the VP8 encoder in libvpx affects Google Chrome before 117.0.5938.132 and libvpx 1.13.1, and is reachable through a crafted…KEVEPSS 49%analysed28 Sep 2023 8.8CVE-2023-4863libwebp Heap Buffer Overflow via Crafted WebP ImageA heap buffer overflow in libwebp allows an out-of-bounds memory write when processing a crafted WebP image. It affects Google Chrome before 116.0.58…KEVEPSS 100%analysed12 Sep 2023 8.8CVE-2023-4762Google Chrome V8 type confusion enables remote code executionGoogle Chrome before 116.0.5845.179 contains a type confusion flaw in the V8 JavaScript engine. A crafted HTML page can trigger the confusion and lea…KEVEPSS 41%analysed5 Sep 2023

Source: NIST National Vulnerability Database (record CVE-2025-65046), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.