Microsoft Security Response Center Blog Alerts

CVE-2025-24053 Microsoft Dataverse Elevation of Privilege Vulnerability

Posted on Thursday March 13, 2025

Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.

Chromium: CVE-2025-24201 Out of bounds write in GPU on Mac

Posted on Wednesday March 12, 2025

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024) for more information. Google is aware of reports that an exploit for CVE-2025-24201 exists in the wild.

Chromium: CVE-2025-2136 Use after free in Inspector

Posted on Wednesday March 12, 2025

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Chromium: CVE-2025-2137 Out of bounds read in V8

Posted on Wednesday March 12, 2025

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Chromium: CVE-2025-1920 Type Confusion in V8

Posted on Wednesday March 12, 2025

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Chromium: CVE-2025-2135 Type Confusion in V8

Posted on Wednesday March 12, 2025

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Page:   12345...119