Security Feature Bypass in Microsoft Edge Through Improper Extension Handling
CVE-2019-1413
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 12 November 2019
What is CVE-2019-1413?
A security feature bypass vulnerability has been identified in Microsoft Edge due to improper handling of extension requests. This flaw allows the browser to fail to request host permissions for all URLs when extensions are triggered, potentially exposing users to unauthorized access or manipulation of web resources. Proper mitigation is necessary to ensure that web extensions operate within the intended security parameters, safeguarding user data and privacy.
Affected Version(s)
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems = unspecified