CVE-2025-47181: Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

CVE-2025-4609: Chromium: CVE-2025-4609 Incorrect handle provided in unspecified circumstances in Mojo

CVE-2025-4664: Chromium: CVE-2025-4664 Insufficient policy enforcement in Loader

CVE-2025-47161: Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

CVE-2025-29842: UrlMon Security Feature Bypass Vulnerability

**What privileges could be gained by an attacker who successfully exploited the vulnerability?**

An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained ("sandboxed") execution environment to a Medium Integrity Level.

Please refer to AppContainer isolation and Mandatory Integrity Control for more information.

Headline

CVE-2025-21235: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News