KB4571709: Windows 10 Version 1803 August 2020 Security Update

The remote Windows host is missing security update 4571709. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

August 11, 2020—KB4571689 (OS Build 15063.2467)

None None...

PT-2020-3703 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge HTML-based affected versions not specified Description: A remote code execution issue exists due to the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary co...

KB4565349: Windows 10 Version 1809 and Windows Server 2019 August 2020 Security Update

The remote Windows host is missing security update 4565349. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2020-57803)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in Microsoft Edge based on EdgeHTML. The vulnerability can be exploited by an attacker to obtain a user's personal information by making a...

The vulnerability of the built-in PDF Reader program of Microsoft Edge browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the built-in PDF Reader software of Microsoft Edge’s browser is related to the lack of protection for operational data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability in the Skype for Business app for the Microsoft Edge browser allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Skype for Business app for the Microsoft Edge browser is related to the lack of protection for business-related data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by clicking on a specially created link...

Microsoft Edge (Chromium) < 81.0.416.64 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 81.0.416.64. It is, therefore, affected by multiple vulnerabilities: - Out of bounds read and write in PDFium in Microsoft Edge Chromium allowed a remote attacker to potentially exploit heap corruption via a...

Microsoft Edge (Chromium) < 81.0.416.72 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 81.0.416.72. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentiall...

Microsoft Edge (Chromium) < 81.0.416.68 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 81.0.416.68. It is, therefore, affected by multiple vulnerabilities: - A use after free in storage in Microsoft Edge Chromium allowed a remote attacker who had compromised the renderer process to potentially...

Microsoft Edge (Chromium) < 84.0.522.40 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 84.0.522.40. It is, therefore, affected by multiple vulnerabilities : - Heap-based buffer overflow in PDFium allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. CVE-2020-65...

The vulnerability in the Microsoft Edge browser extension allows a hacker to enhance their privileges.

The vulnerability of the Microsoft Edge browser’s “Feedback” extension is related to insecure handling of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based when DLL files are allowed to download without prompting additional warning to the user. An attacker who successfully exploited this vulnerability could drop the DLL files on the users Download folder or equivalent an...

KLA11870 PE vulnerability in Microsoft Browser

An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2020-1341 Related products Microsoft-Edge CVE list CVE-2020-1341 unknown KB list Solution Install necessary updates from the Settings...

CVE-2020-1462

An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge EdgeHTML-based, aka 'Skype for Business via Microsoft Edge EdgeHTML-based Information Disclosure Vulnerability'...

CVE-2020-1433

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclosure Vulnerability'...

Information disclosure

An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge EdgeHTML-based, aka 'Skype for Business via Microsoft Edge EdgeHTML-based Information Disclosure Vulnerability'...

CVE-2020-1462

An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge EdgeHTML-based, aka 'Skype for Business via Microsoft Edge EdgeHTML-based Information Disclosure Vulnerability'...

CVE-2020-1462

CVE-2020-1462 is described as an information-disclosure vulnerability that occurs when Skype for Business is accessed through Microsoft Edge (EdgeHTML-based). The available initial description states the affected component as Skype for Business via EdgeHTML-based Edge, with the impact limited to ...

CVE-2020-1433

CVE-2020-1433 affects Microsoft Edge PDF Reader. The vulnerability is caused by the component’s improper handling of in-memory objects, enabling information disclosure. CVSS-3.1 base score 6.5 (Network, Low attack complexity, No privileges required, User interaction required; Confidentiality impa...