CVE-2020-1220

CVE-2020-1220: Edge (Chromium-based) in IE Mode spoofing vulnerability due to improper handling of specific redirects. Affects Microsoft Edge in IE Mode; vulnerability allows spoofing of the displayed site. Connected CNVD entry reiterates Edge spoofing context; no vendor-provided fix details in t...

June 9, 2020—KB4557957 (OS Build 19041.329)

None None...

Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability

A spoofing vulnerability exists when theMicrosoft Edge Chromium-based in IE Mode improperly handles specific redirects. An attacker who successfully exploits the IE Mode vulnerability could trick a user into believing that the user was on a legitimate website. The specially crafted website could...

June 9, 2020—KB4561621 (OS Build 17134.1550)

None None...

June 9, 2020—KB4561602 (OS Build 16299.1932)

None None...

Microsoft Edge Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests. An attacker who successfully exploited this vulnerability could determine the origin of all webpages in the affected browser. In a web-based attack scenario, an attacker could host a websi...

Microsoft Edge Chromium Installed

Binary data microsoftedgechromiuminstalled.nbin...

Microsoft Edge (Chromium) < 83.0.478.37 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 83.0.478.37. It is, therefore, affected by multiple vulnerabilities: - A use after free in media in Microsoft Edge Chromium allowed a remote attacker who had compromised the renderer process to potentially...

Microsoft Edge (Chromium-based) Detection (Windows SMB Login)

This script detects the installed version of Microsoft Edge Chromium-based for Windows. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (May 2020)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2020-1195

An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based when the Feedback extension improperly validates input. An attacker who successfully exploited this vulnerability could write files to arbitrary locations and gain elevated privileges. The vulnerability by itself does...

CVE-2020-1096

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

CVE-2020-1059

A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a piv...

CVE-2020-1056

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attacker could host a website that is used ...

CVE-2020-1037

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Privilege escalation

An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based when the Feedback extension improperly validates input, aka 'Microsoft Edge Chromium-based Elevation of Privilege Vulnerability'...

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used t...

Spoofing

A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka 'Microsoft Edge Spoofing Vulnerability'...

CVE-2020-1195

Summary (CVE-2020-1195): An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) stemming from improper input validation in the Feedback extension. The issue could allow an attacker to write files to arbitrary locations and gain elevated privileges. Affected product: Mic...