Vulnerability · Published Jun 9, 2020 · Assigned by microsoft

CVE-2020-1242

Medium 5.3

In plain English

A medium-severity security flaw in Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.9% (higher than 90% of all known vulnerabilities).

Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)3.9%top 9.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.

Affected products (as reported)

VendorProductVersions
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for x64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for 32-bit Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2019 unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems unspecified
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems unspecified

References