Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2019-0762: Internet Explorer and Edge can be tricked into unsafe actions
CVE-2019-0762 · published 7 years ago
Summary
Both Internet Explorer and Microsoft Edge may incorrectly treat requests that come from other websites, allowing a malicious site to bypass built-in safety checks. This could let attackers run harmful code or steal information while a user is browsing. Install the latest security updates from Microsoft and consider using more current browsers that receive regular protection.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | internet_explorer |
11 cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:* |
| microsoft | edge |
All versions
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:* |
Original advisory text
A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Feature Bypass Vulnerability'.
A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Feature Bypass Vulnerability'.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0762 Patch Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-863Incorrect Authorization
Timeline
Published9 Apr 2019
Updated24 Oct 2026
First seen29 Sep 2026
Sources
CVE-2019-0762 · NVD
Track software like this
Free during beta