CVE-2020-0706
4.3MEDIUM
Key Information:
- Vendor
- Microsoft
- Status
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For 32-bit Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For X64-based Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For Arm64-based Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1809 For 32-bit Systems
- Vendor
- CVE Published:
- 11 February 2020
Summary
An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure Vulnerability'.
Affected Version(s)
Internet Explorer 10 Windows Server 2012
Internet Explorer 11 Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 Windows 10 Version 1803 for x64-based Systems
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database