Alert GCSA-25048 - Vulnerabilita' in Microsoft Edge

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

Alert ID: GCSA-25048
Data: 7 Aprile 2025
Titolo: Vulnerabilita' in Microsoft Edge

******************************************************************

:: Descrizione del problema

Sono state identificate vulnerabilita' multiple in Microsoft Edge
che potrebbero essere sfruttate da un attaccante remoto per
innescare spoofing, condizioni di Denial of Service, rivelare informazioni sensibili
ed eseguire codice arbitrario su un sistema che sia affetto.

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

Microsoft Edge versioni precedenti alla 135.0.3179.54
Microsoft Edge (IOS) versioni priori alla 132.0.2957.118


:: Impatto

Remote Code Execution
Denial of Service
Information Disclosure
Spoofing


:: Soluzioni

Aggiornare il software all'ultima versione disponibile

L'aggiornamento avviene in modo automatico.
E' possibile verificare la versione attualmente in uso
scegliendo dal menu "Impostazioni e altro"
(icona 3 punti verticali in alto a dx) la voce
Guida e feedback -> Informazioni su Microsoft Edge


:: Riferimenti

Security Update Guide
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#april-3-2025
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25001
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29796
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25000
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29815
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3066
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3067
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3068
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3069
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3070
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3071
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3072
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3073
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-3074

Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3066
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3067
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3068
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3069
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3070
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3071
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3072
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3073
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3074
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25000
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25001
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29796
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29815




GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZ/OJBw0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCUqsAnRk/NJZhjiGrnZcluUEK7WlT4NF/AKCJqgq8VU2s
5oas48P+RjSeP7MusQ==
=2ikK
-----END PGP SIGNATURE-----