Multiple vulnerabilities in Microsoft Browsers

Description

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Edge for Android can be exploited remotely to spoof user interface.
2. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2020-17153

• CVE-2020-17131

Related products

• Microsoft-Edge
• ChakraCore

CVE list

• CVE-2020-17153
  high
• CVE-2020-17131
  critical

KB list

• 4592449
• 4592440
• 4592438

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com