Remote Code Execution Vulnerability in Microsoft Edge Browser
CVE-2020-1037

4.2MEDIUM

Key Information:

Vendor

Microsoft
Status
Chakracore
Microsoft Edge (edgehtml-based)
Vendor
CVE Published:
21 May 2020

What is CVE-2020-1037?

A vulnerability in the Chakra scripting engine of Microsoft Edge allows for remote code execution due to improper handling of objects in memory. This flaw can potentially enable attackers to execute arbitrary code on the affected system, posing significant risk to users. Users are encouraged to apply available security updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

ChakraCore 0

Microsoft Edge (EdgeHTML-based) Windows 10 for 32-bit Systems 1.0..0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.