07/08/2025

ZDI-25-817: (0Day) Microsoft Edge PDF NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 6.5.

Comments are closed.

You may also like

ZDI-25-321: GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-25-716: (0Day) Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability