Kaspersky LabKLA11858KLA11858 Multiple vulnerabilities in Microsoft Browser
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.248 Low
EPSS
Percentile
96.6%
Detect date:
07/14/2020
Severity:
Critical
Description:
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code.
Exploitation:
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Affected products:
Internet Explorer 9
Internet Explorer 11
Microsoft Edge (EdgeHTML-based)
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2020-1462
CVE-2020-1432
CVE-2020-1433
CVE-2020-1403
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2020-14624.3Warning
CVE-2020-14324.3Warning
CVE-2020-14334.3Warning
CVE-2020-14037.6Critical
KB list:
4565541
4565524
4558998
4565489
4565479
4565483
4565508
4565511
4565513
4565537
4565503
Microsoft official advisories:
References
support.microsoft.com/kb/4558998
support.microsoft.com/kb/4565479
support.microsoft.com/kb/4565483
support.microsoft.com/kb/4565489
support.microsoft.com/kb/4565503
support.microsoft.com/kb/4565508
support.microsoft.com/kb/4565511
support.microsoft.com/kb/4565513
support.microsoft.com/kb/4565524
support.microsoft.com/kb/4565537
support.microsoft.com/kb/4565541
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1403
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1432
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1433
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1462
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1403
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1432
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1433
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1462
portal.msrc.microsoft.com/en-us/security-guidance
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Edge/
threats.kaspersky.com/en/product/Microsoft-Internet-Explorer/
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.248 Low
EPSS
Percentile
96.6%