Microsoft

Microsoft has released a critical security update for Edge Stable Channel on July 1, 2025, addressing a severe vulnerability (CVE-2025-6554) that cybercriminals have actively exploited. The vulnerability affects the underlying Chromium engine that powers Microsoft Edge, potentially allowing attackers to execute arbitrary code or gain unauthorized access to sensitive user data. This highlights the urgency of applying the security update immediately to protect against sophisticated attacks that could compromise personal information, corporate data, or system integrity.

Source: https://cybersecuritynews.com/microsoft-edge-chromium-vulnerability/

TPRM report: https://scoringcyber.rankiteo.com/company/microsoft

"id": "mic927070325",
"linkid": "microsoft",
"type": "Vulnerability",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Microsoft',
                        'type': 'Corporation'}],
 'attack_vector': 'Exploited in the wild',
 'date_detected': '2025-07-01',
 'date_publicly_disclosed': '2025-07-01',
 'description': 'Microsoft has released a critical security update for Edge '
                'Stable Channel on July 1, 2025, addressing a severe '
                'vulnerability that cybercriminals have actively exploited.',
 'impact': {'systems_affected': ['Microsoft Edge', 'Chromium-based browsers']},
 'motivation': ['Data Theft', 'System Compromise', 'Arbitrary Code Execution'],
 'post_incident_analysis': {'corrective_actions': ['Apply Security Patch'],
                            'root_causes': ['Zero-Day Vulnerability '
                                            'Exploitation']},
 'recommendations': ['Update Microsoft Edge to version 138.0.3351.65 or later '
                     'immediately'],
 'references': [{'date_accessed': '2025-07-01',
                 'source': 'Microsoft Security Update'}],
 'response': {'communication_strategy': ['Public Disclosure',
                                         'User Notifications'],
              'remediation_measures': ['Patching']},
 'threat_actor': 'Unknown',
 'title': 'Microsoft Edge Security Update for CVE-2025-6554 and CVE-2025-49713',
 'type': 'Zero-Day Vulnerability',
 'vulnerability_exploited': ['CVE-2025-6554', 'CVE-2025-49713']}