Spoofing Vulnerability in Microsoft Edge Browser by Microsoft
CVE-2020-1059

4.3MEDIUM

Key Information:

Vendor
Microsoft
Status
Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For 32-bit Systems
Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For X64-based Systems
Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For Arm64-based Systems
Microsoft Edge (edgehtml-based) On Windows 10 Version 1809 For 32-bit Systems
Vendor
CVE Published:
21 May 2020

Summary

A spoofing vulnerability exists in Microsoft Edge due to improper parsing of HTTP content. This flaw could allow an attacker to exploit web browser behavior to mislead users, posing risks for secure web interactions. Users are encouraged to apply available patches to mitigate potential security issues.

Affected Version(s)

Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems = unspecified

Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems = unspecified

Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems = unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.