CVE-2020-0706

Description

An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka Microsoft Browser Information Disclosure Vulnerability.

Risk Information

Base Score
4.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
9.895

Associated Vulnerability

VulnerabilityOS Platform
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4537776)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB4537776)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4537764)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 for x64-based Systems (KB4537764)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4537764)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1903 for x86-based Systems (KB4532693)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server, version 1903 for x64-based Systems (KB4532693)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server, version 1909 for x64-based Systems (KB4532693)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1909 for x64-based Systems (KB4532693)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1909 for x86-based Systems (KB4532693)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1903 for x64-based Systems (KB4532693)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server 2012 for x64-based Systems (KB4537814)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4537789)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4537789)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4537762)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 (1803) for x64-based Systems (KB4537762)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4537762)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x86-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2012 for x64-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 10 for Windows Server 2012 for x64-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x64-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4537767)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4532691)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4532691)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server 2019 for x64-based Systems (KB4532691)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 8.1 for x86-based Systems (KB4537821)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 8.1 for x64-based Systems (KB4537821)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4537821)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-283262020-02 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4537776)
PATCH-283272020-02 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4537776)
PATCH-283282020-02 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4537764)
PATCH-283292020-02 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4537764)
PATCH-283302020-02 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4537764)
PATCH-283202020-02 Cumulative Update for Windows 10 Version 1903 for x86-based Systems (KB4532693)
PATCH-283212020-02 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4532693)
PATCH-283222020-02 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4532693)
PATCH-283232020-02 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4532693)
PATCH-283242020-02 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4532693)
PATCH-283252020-02 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4532693)
PATCH-283392020-02 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB4537814)
PATCH-283182020-02 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4537789)
PATCH-283192020-02 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4537789)
PATCH-283122020-02 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4537762)
PATCH-283132020-02 Cumulative Update for Windows Server 2016 (1803) for x64-based Systems (KB4537762)
PATCH-283142020-02 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4537762)
PATCH-283612020-02 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x86-based systems (KB4537767) (ESU)
PATCH-283622020-02 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 for x64-based systems (KB4537767)
PATCH-283632020-02 Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 for x64-based systems (KB4537767)
PATCH-283642020-02 Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4537767) (ESU)
PATCH-283652020-02 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4537767)
PATCH-283662020-02 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4537767) (ESU)
PATCH-283672020-02 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4537767)
PATCH-283682020-02 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based systems (KB4537767) (ESU)
PATCH-283692020-02 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4537767) (ESU)
PATCH-283702020-02 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4537767)
PATCH-283152020-02 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4532691)
PATCH-283162020-02 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4532691)
PATCH-283172020-02 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4532691)
PATCH-283342020-02 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4537821)
PATCH-283352020-02 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4537821)
PATCH-283362020-02 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4537821)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234