Microsoft Edge Chromium Remote Code Execution Vulnerabilities Tracked as CVE-2025-21342 and CVE-2022-21931
Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen May 25, 2026

Microsoft has published Security Update Guide entries for two Microsoft Edge (Chromium-based) remote code execution flaws, CVE-2025-21342 and CVE-2022-21931. Both advisories identify the same impact category—remote code execution in the browser—indicating that successful exploitation could allow malicious code to run in the context of the targeted Edge process.
The disclosures show Microsoft continuing to track and remediate serious browser security issues affecting its Chromium-based Edge platform through formal update guidance. Organizations using Microsoft Edge should review the relevant Security Update Guide entries for affected versions and apply available browser updates promptly, as RCE flaws in web browsers can be triggered through malicious web content and pose a direct risk to enterprise endpoints.


