Skip to main content

Insufficient Granularity of Address Regions Protected by Register Locks

CVE-2025-21283

Medium
6.5/10

Summary

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • REQUIRED
  • NONE
  • HIGH
  • NONE

CWE-1222 - Insufficient Granularity of Address Regions Protected by Register Locks

The product defines a large address region protected from modification by the same register lock control bit. This results in a conflict between the functional requirement that some addresses need to be writable by software during operation and the security requirement that the system configuration lock bit must be set during the boot process.

References

Advisory Timeline

  • Published