CVE-2020-1056
8.1HIGH
Key Information:
- Vendor
- Microsoft
- Status
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For 32-bit Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For X64-based Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For Arm64-based Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1809 For 32-bit Systems
- Vendor
- CVE Published:
- 21 May 2020
Summary
An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.
Affected Version(s)
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems = unspecified
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database