Skip to content
OpenAdvisories
Unscored CVE-2019-1413 EUVD-2019-9970GHSA-gh8c-8r76-q6m4

A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to request host permissi…

Published Nov 12, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Description

A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to request host permission for all_urls, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2016 unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2019 unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems unspecified —

References