CVE-2019-1220
A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft Browser Security Feature Bypass Vulnerability'.
- Score
- CVSS 3.1 4.3 Medium
- Status
- Modified - secure@microsoft.com
- Published
- 2019-09-11
- Last modified
- 2024-08-04
- Weaknesses
- CWE-425
Affected products
- Edge (Microsoft)
- Internet Explorer (Microsoft)
- Internet Explorer 10 (Microsoft)
- Internet Explorer 11 (Microsoft)
- Internet Explorer 11 On Windows 10 Version 1903 For 32-bit Systems (Microsoft)
- Internet Explorer 11 On Windows 10 Version 1903 For Arm64-based Systems (Microsoft)
- Internet Explorer 11 On Windows 10 Version 1903 For X64-based Systems (Microsoft)
- Internet Explorer 11 On Windows Server 2012 (Microsoft)
- Internet Explorer 9 (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 For 32-bit Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 For X64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1607 For 32-bit Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1607 For X64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1703 For 32-bit Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1703 For X64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1709 For 32-bit Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1709 For Arm64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1709 For X64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1803 For 32-bit Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1803 For Arm64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1803 For X64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1809 For 32-bit Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1809 For Arm64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1809 For X64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1903 For 32-bit Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1903 For Arm64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows 10 Version 1903 For X64-based Systems (Microsoft)
- Microsoft Edge Edgehtml-based On Windows Server 2016 (Microsoft)
- Microsoft Edge Edgehtml-based On Windows Server 2019 (Microsoft)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1220
