CVE-2019-0612

EUVD-2019-1376
A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Affected Products (NVD)
VendorProductVersion
microsoftedge
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1703 (x64, x86)
KB4489871
1709 (arm64, x64, x86)
KB4489886
1803 (arm64, x64, x86)
KB4489868
1809 (arm64, x64, x86)
KB4489899
Windows Server 2019
Standard
KB4489899
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0612
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0612