Lucene search

K
mscveMicrosoftMS:ADV200002
HistoryJan 28, 2020 - 8:00 a.m.

Chromium Security Updates for Microsoft Edge (Chromium-Based)

2020-01-2808:00:00
Microsoft
msrc.microsoft.com
677

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.971 High

EPSS

Percentile

99.8%

Please note: Starting 1/21/2021, we will be releasing the Chrome CVEs that are included in the new releases of Microsoft Edge (Chromium-based) directly in the Security Update Guide. Please see Security Update Guide Supports CVEs Assigned by Industry Partners for more information.

This advisory will be updated whenever Microsoft releases a version of Microsoft Edge (Chromium-based) which incorporates publicly disclosed security updates from the Chromium project. Microsoft will document separately any vulnerabilities in Microsoft Edge (Chromium-based), that are not in Chromium, under a Microsoft-assigned CVE number (see, for example: CVE-2020-1341).

History of Microsoft Edge (Chromium-based) Security Updates

Microsoft Edge Version Date Released Based on Chromium Version Highest Severity Fix in Release CVEs
87.0.664.75 1/7/2021 87.0.4280.141 High CVE-2021-21106, CVE-2021-21107, CVE-2021-21108, CVE-2021-21109, CVE-2021-21110, CVE-2021-21111, CVE-2021-21112, CVE-2021-21113, CVE-2021-21114, CVE-2021-21115, CVE-2021-21116, CVE-2020-16043, CVE-2020-15995
87.0.664.57 12/7/2020 87.0.4280.88 High CVE-2020-16037, CVE-2020-16038, CVE-2020-16039, CVE-2020-16040, CVE-2020-16041, CVE-2020-16042
87.0.664.41 11/19/2020 87.0.4280.66 for Windows and Linux, 87.0.4280.67 for Mac High CVE-2019-8075, CVE-2020-16012, CVE-2020-16014, CVE-2020-16015, CVE-2020-16018, CVE-2020-16022, CVE-2020-16023, CVE-2020-16024, CVE-2020-16025, CVE-2020-16026, CVE-2020-16027, CVE-2020-16028, CVE-2020-16029, CVE-2020-16030, CVE-2020-16031, CVE-2020-16032, CVE-2020-16033, CVE-2020-16034, CVE-2020-16036
86.0.622.69 11/13/2020 86.0.4240.198 High CVE-2020-16013 *, CVE-2020-16017 *
86.0.622.68 11/11/2020 86.0.4240.193 High CVE-2020-16016
86.0.622.63 11/4/2020 86.0.4240.183 High CVE-2020-16004, CVE-2020-16005, CVE-2020-16006, CVE-2020-16007, CVE-2020-16008, CVE-2020-16009 *, CVE-2020-16011
86.0.622.51 10/22/2020 86.0.4240.111 High CVE-2020-15999 *, CVE-2020-16000, CVE-2020-16001, CVE-2020-16002, CVE-2020-16003
86.0.622.38 10/8/2020 86.0.4240.75 High CVE-2020-6557, CVE-2020-15968, CVE-2020-15969, CVE-2020-15971, CVE-2020-15972, CVE-2020-15973, CVE-2020-15974, CVE-2020-15975, CVE-2020-15977, CVE-2020-15979, CVE-2020-15981, CVE-2020-15982, CVE-2020-15985, CVE-2020-15987, CVE-2020-15988, CVE-2020-15989, CVE-2020-15990, CVE-2020-15991, CVE-2020-15992
85.0.564.63 9/23/2020 85.0.4183.121 High CVE-2020-15960, CVE-2020-15961, CVE-2020-15962, CVE-2020-15963, CVE-2020-15964, CVE-2020-15965, CVE-2020-15966
85.0.564.51 9/9/2020 85.0.4183.102 High CVE-2020-6574, CVE-2020-6575, CVE-2020-6576, CVE-2020-15959
85.0.564.41 8/27/2020 85.0.4183.83 High CVE-2020-6558, CVE-2020-6559, CVE-2020-6560, CVE-2020-6561, CVE-2020-6562, CVE-2020-6563, CVE-2020-6564, CVE-2020-6566, CVE-2020-6567, CVE-2020-6568, CVE-2020-6569, CVE-2020-6570, CVE-2020-6571
84.0.522.63 8/20/2020 84.0.4147.135 High CVE-2020-6556
84.0.522.59 8/11/2020 84.0.4147.125 High CVE-2020-6542, CVE-2020-6543, CVE-2020-6544, CVE-2020-6545, CVE-2020-6546, CVE-2020-6547, CVE-2020-6548, CVE-2020-6549, CVE-2020-6550, CVE-2020-6551, CVE-2020-6552, CVE-2020-6553, CVE-2020-6554, CVE-2020-6555
84.0.522.49 7/30/2020 84.0.4147.105 High CVE-2020-6532, CVE-2020-6537, CVE-2020-6538, CVE-2020-6539, CVE-2020-6540, CVE-2020-6541
84.0.522.40 7/16/2020 84.0.4147.89 Critical CVE-2020-6510, CVE-2020-6511, CVE-2020-6512, CVE-2020-6513, CVE-2020-6514, CVE-2020-6515, CVE-2020-6516, CVE-2020-6517, CVE-2020-6518, CVE-2020-6519, CVE-2020-6520, CVE-2020-6521, CVE-2020-6522, CVE-2020-6523, CVE-2020-6524, CVE-2020-6525, CVE-2020-6526, CVE-2020-6527, CVE-2020-6528, CVE-2020-6529, CVE-2020-6530, CVE-2020-6531, CVE-2020-6533, CVE-2020-6534, CVE-2020-6535, CVE-2020-6536
83.0.478.56 6/24/2020 83.0.4103.116 High CVE-2020-6509
83.0.478.53 6/17/2020 83.0.4103.106 High CVE-2020-6505, CVE-2020-6506, CVE-2020-6507
83.0.478.45 6/4/2020 83.0.4103.97 High CVE-2020-6493, CVE-2020-6494, CVE-2020-6495, CVE-2020-6496
83.0.478.37 5/21/2020 83.0.4103.61 High CVE-2020-6465, CVE-2020-6466, CVE-2020-6467, CVE-2020-6468, CVE-2020-6469, CVE-2020-6470, CVE-2020-6471, CVE-2020-6472, CVE-2020-6473, CVE-2020-6474, CVE-2020-6475, CVE-2020-6476, CVE-2020-6478, CVE-2020-6479, CVE-2020-6480, CVE-2020-6481, CVE-2020-6482, CVE-2020-6483, CVE-2020-6484, CVE-2020-6486, CVE-2020-6487, CVE-2020-6488, CVE-2020-6489, CVE-2020-6490
81.0.416.72 5/7/2020 81.0.4044.138 High CVE-2020-6831, CVE-2020-6464
81.0.416.68 4/29/2020 81.0.4044.129 High CVE-2020-6461, CVE-2020-6462
81.0.416.64 4/23/2020 81.0.4044.122 High CVE-2020-6458, CVE-2020-6459, CVE-2020-6460
81.0.416.58 4/17/2020 81.0.4044.113 Critical CVE-2020-6457
81.0.416.53 4/13/2020 81.0.4044.92 High CVE-2020-6454, CVE-2020-6423, CVE-2020-6455, CVE-2020-6430, CVE-2020-6456, CVE-2020-6431, CVE-2020-6432, CVE-2020-6433, CVE-2020-6434, CVE-2020-6435, CVE-2020-6436, CVE-2020-6437, CVE-2020-6438, CVE-2020-6439, CVE-2020-6440, CVE-2020-6441, CVE-2020-6442, CVE-2020-6443, CVE-2020-6444, CVE-2020-6445, CVE-2020-6446, CVE-2020-6447, CVE-2020-6448
80.0.361.109 4/1/2020 80.0.3987.162 High CVE-2020-6450, CVE-2020-6451, CVE-2020-6452
80.0.361.69 3/19/2020 80.0.3987.149 High CVE-2020-6422, CVE-2020-6424, CVE-2020-6425, CVE-2020-6426, CVE-2020-6427, CVE-2020-6428, CVE-2020-6429, CVE-2019-20503, CVE-2020-6449
80.0.361.66 3/4/2020 80.0.3987.132 High CVE-2020-6420
80.0.361.62 2/25/2020 80.0.3987.122 High CVE-2020-6407, CVE-2020-6418 *
80.0.361.57 2/20/2020 80.0.3987.116 High CVE-2020-6383, CVE-2020-6384, CVE-2020-6386
80.0.361.48 2/7/2020 80.0.3987.87 High CVE-2020-6381, CVE-2020-6382, CVE-2019-18197, CVE-2019-19926, CVE-2020-6385, CVE-2019-19880, CVE-2019-19925, CVE-2020-6387, CVE-2020-6388, CVE-2020-6389, CVE-2020-6390, CVE-2020-6391, CVE-2020-6392, CVE-2020-6393, CVE-2020-6394, CVE-2020-6395, CVE-2020-6396, CVE-2020-6397, CVE-2020-6398, CVE-2020-6399, CVE-2020-6400, CVE-2020-6401, CVE-2020-6402, CVE-2020-6404, CVE-2020-6405, CVE-2020-6406, CVE-2019-19923, CVE-2020-6408, CVE-2020-6409, CVE-2020-6410, CVE-2020-6411, CVE-2020-6412, CVE-2020-6413, CVE-2020-6414, CVE-2020-6415, CVE-2020-6416, CVE-2020-6417
79.0.309.68 1/17/2020 79.0.3945.130 Critical CVE-2020-6378, CVE-2020-6379, CVE-2020-6380, CVE-2020-0601
  • CVE’s in bold have been reported to be exploited in the wild.

How can I see the version of the browser?

  1. In your Microsoft Edge browser, click on the 3 dots (…) on the very right-hand side of the window
  2. Click on Help and Feedback 3. Click onAbout Microsoft Edge

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.971 High

EPSS

Percentile

99.8%