CVE-2020-1096
7.5HIGH
Key Information:
- Vendor
- Microsoft
- Status
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For 32-bit Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For X64-based Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For Arm64-based Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1809 For 32-bit Systems
- Vendor
- CVE Published:
- 21 May 2020
Summary
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'.
Affected Version(s)
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems = unspecified
References
EPSS Score
5% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database