Vulnerability · Published Jun 9, 2020 · Assigned by microsoft

CVE-2020-1220

Medium 6.1

In plain English

A medium-severity security flaw in Microsoft Edge (Chromium-based) in IE Mode on Windows 10 for 32-bit Systems from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 79% of all known vulnerabilities).

Severity (CVSS NVD)6.1Medium
Exploit odds (30 days)1.9%top 20.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability'.

Affected products (as reported)

VendorProductVersions
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1803 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1803 for 32-bit Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1803 for x64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1709 for x64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for x64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1903 for 32-bit Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for x64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows Server 2019 unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for 32-bit Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1903 for x64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1903 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for x64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for 32-bit Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows Server 2012 R2 unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1607 for x64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows RT 8.1 unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for 32-bit Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 7 for x64-based Systems Service Pack 1 unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows Server 2012 unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows Server 2008 R2 for x64-based Systems Service Pack 1 unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1607 for 32-bit Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 8.1 for 32-bit systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows Server 2016 unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1709 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1709 for 32-bit Systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 8.1 for x64-based systems unspecified
Microsoft Microsoft Edge (Chromium-based) in IE Mode on Windows 10 for x64-based Systems unspecified

References