CVE-2025-29795
Published: 23 March 2025
Summary
CVE-2025-29795 is a high-severity Link Following (CWE-59) vulnerability in Microsoft Edge Update. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked in the top 31.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and CM-6 (Configuration Settings).
Deeper analysis
CVE-2025-29795 is an improper link resolution before file access vulnerability, commonly referred to as 'link following', affecting Microsoft Edge (Chromium-based). Published on 2025-03-23, the issue is classified under CWE-59 and carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact.
The vulnerability can be exploited by an authorized local attacker possessing low privileges. Exploitation requires local access and low complexity with no user interaction, enabling the attacker to elevate privileges and achieve high confidentiality, integrity, and availability impacts on the targeted system.
Microsoft's Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29795 provides details on patches and mitigation steps.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-8694
Vulnerability details
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes a local privilege escalation vulnerability (CWE-59 link following) in Microsoft Edge that allows a low-privileged local attacker to elevate privileges with high impact on confidentiality, integrity, and availability, directly mapping to exploitation for privilege escalation.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely patching of the improper link resolution vulnerability in Microsoft Edge to directly prevent local privilege escalation.
Process isolation confines Edge's renderer processes, mitigating privilege escalation from improper link following to unauthorized file access.
Secure configuration settings for Edge, such as enabling full sandboxing and site isolation, reduce exploitation risk of the link following flaw.