Vulnerability Description
A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to request host permission for all_urls, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Edge | - |
| Microsoft | Windows 10 | 1607 |
| Microsoft | Windows Server 2016 | - |
| Microsoft | Windows Server 2019 | - |
Related Weaknesses (CWE)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1413PatchVendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1413PatchVendor Advisory
FAQ
What is CVE-2019-1413?
CVE-2019-1413 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to request host permission for all_urls, aka 'Microsoft Edge Security Feature Bypass ...
How severe is CVE-2019-1413?
CVE-2019-1413 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-1413?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Edge, Microsoft Windows 10, Microsoft Windows Server 2016, Microsoft Windows Server 2019.