CVE-2020-1242
5.3MEDIUM
Key Information:
- Vendor
- Microsoft
- Status
- Microsoft Edge (edgehtml-based) On Windows 10 Version 2004 For X64-based Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 2004 For Arm64-based Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 2004 For 32-bit Systems
- Microsoft Edge (edgehtml-based) On Windows 10 Version 1803 For 32-bit Systems
- Vendor
- CVE Published:
- 9 June 2020
Summary
An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.
Affected Version(s)
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems = unspecified
References
EPSS Score
0% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database