Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems
46 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1462 | | An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for Busin | MEDIUM 4.3 | 4.2 % | ||
| CVE-2020-1433 | | An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF | MEDIUM 6.5 | 5.3 % | ||
| CVE-2020-1242 | | An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information | MEDIUM 5.3 | 3.9 % | ||
| CVE-2020-1219 | | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corr | HIGH 7.5 | 19 % | ||
| CVE-2020-1073 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 8.1 | 8.9 % | ||
| CVE-2020-0970 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 13 % | ||
| CVE-2020-0969 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b | HIGH 7.5 | 13 % | ||
| CVE-2020-0848 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 9.6 % | ||
| CVE-2020-0831 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0830 | | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting | HIGH 7.5 | 8.7 % | ||
| CVE-2020-0829 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0828 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0827 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 13 % | ||
| CVE-2020-0826 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0825 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 13 % | ||
| CVE-2020-0823 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0816 | | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio | HIGH 8.8 | 11 % | ||
| CVE-2020-0813 | | An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker | HIGH 7.5 | 5.5 % | ||
| CVE-2020-0812 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b | HIGH 7.5 | 7.9 % | ||
| CVE-2020-0811 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b | HIGH 7.5 | 7.7 % | ||
| CVE-2020-0768 | | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting | HIGH 7.5 | 8.7 % | ||
| CVE-2020-0767 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 18 % | ||
| CVE-2020-0713 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 10 % | ||
| CVE-2020-0712 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 10 % | ||
| CVE-2020-0711 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 10 % | ||
| CVE-2020-0710 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 10 % | ||
| CVE-2020-0706 | | An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Brow | MEDIUM 4.3 | 5.1 % | ||
| CVE-2020-0663 | | An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an att | MEDIUM 4.2 | 1.6 % | ||
| CVE-2019-1428 | | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), | HIGH 7.5 | 9.8 % | ||
| CVE-2019-1427 | unspecified | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), | HIGH 7.5 | 9.8 % | ||
| CVE-2019-1426 | | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), | HIGH 7.5 | 9.8 % | ||
| CVE-2019-1413 | | A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to request host permissio | MEDIUM 4.3 | 1.1 % | ||
| CVE-2019-1366 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 9.9 % | ||
| CVE-2019-1357 | | A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability'. T | MEDIUM 4.3 | 2.3 % | ||
| CVE-2019-1356 | | An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft E | MEDIUM 6.5 | 6.2 % | ||
| CVE-2019-1335 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 9.9 % | ||
| CVE-2019-1308 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 10 % | ||
| CVE-2019-1307 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 10 % | ||
| CVE-2019-0608 | | A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability' | MEDIUM 4.3 | 2.4 % | ||
| CVE-2019-1300 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 8.7 % | ||
| CVE-2019-1299 | unspecified | An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft E | MEDIUM 6.5 | 5.8 % | ||
| CVE-2019-1298 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 8.7 % | ||
| CVE-2019-1237 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 8.7 % | ||
| CVE-2019-1220 | | A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific U | MEDIUM 4.3 | 3.8 % | ||
| CVE-2019-1217 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 8.7 % | ||
| CVE-2019-1138 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C | HIGH 7.5 | 8.7 % |