Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems
28 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1462 | | An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for Busin | MEDIUM 4.3 | 4.2 % | ||
| CVE-2020-1433 | | An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF | MEDIUM 6.5 | 5.3 % | ||
| CVE-2020-1242 | | An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information | MEDIUM 5.3 | 3.9 % | ||
| CVE-2020-1219 | | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corr | HIGH 7.5 | 19 % | ||
| CVE-2020-1073 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 8.1 | 8.9 % | ||
| CVE-2020-0970 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 13 % | ||
| CVE-2020-0969 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b | HIGH 7.5 | 13 % | ||
| CVE-2020-0848 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 9.6 % | ||
| CVE-2020-0831 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0830 | | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting | HIGH 7.5 | 8.7 % | ||
| CVE-2020-0829 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0828 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0827 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 13 % | ||
| CVE-2020-0826 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0825 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 13 % | ||
| CVE-2020-0823 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 8.9 % | ||
| CVE-2020-0816 | | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio | HIGH 8.8 | 11 % | ||
| CVE-2020-0813 | | An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker | HIGH 7.5 | 5.5 % | ||
| CVE-2020-0812 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b | HIGH 7.5 | 7.9 % | ||
| CVE-2020-0811 | | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b | HIGH 7.5 | 7.7 % | ||
| CVE-2020-0768 | | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting | HIGH 7.5 | 8.7 % | ||
| CVE-2020-0767 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 18 % | ||
| CVE-2020-0713 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 10 % | ||
| CVE-2020-0712 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 10 % | ||
| CVE-2020-0711 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 10 % | ||
| CVE-2020-0710 | | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin | HIGH 7.5 | 10 % | ||
| CVE-2020-0706 | | An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Brow | MEDIUM 4.3 | 5.1 % | ||
| CVE-2020-0663 | | An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an att | MEDIUM 4.2 | 1.6 % |