Spoofing Vulnerability in Microsoft Edge (Chromium-based) IE Mode
CVE-2020-1220

6.1MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Edge (chromium-based) In Ie Mode On Windows 10 Version 1803 For Arm64-based Systems
Microsoft Edge (chromium-based) In Ie Mode On Windows 10 Version 1803 For 32-bit Systems
Microsoft Edge (chromium-based) In Ie Mode On Windows 10 Version 1803 For X64-based Systems
Microsoft Edge (chromium-based) In Ie Mode On Windows 10 Version 1709 For X64-based Systems
Vendor
CVE Published:
9 June 2020

What is CVE-2020-1220?

A spoofing vulnerability exists in Microsoft Edge (Chromium-based) when operating in IE Mode, allowing attackers to manipulate specific redirects. This flaw may be exploited to mislead users into interacting with malicious sites, jeopardizing data integrity and user safety.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Microsoft Edge (Chromium-based) in IE Mode on Windows 10 for 32-bit Systems = unspecified

Microsoft Edge (Chromium-based) in IE Mode on Windows 10 for x64-based Systems = unspecified

Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1607 for 32-bit Systems = unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.