CVE-2019-0612

medium · 5.3

A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.

5.3

CVSS

10.5%

EPSS (exploit prob.)

96th

EPSS percentile

2019-04-08

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Vendor	Product	Affected versions
microsoft	edge	all versions
microsoft	windows_10	1703
microsoft	windows_10	1709
microsoft	windows_10	1803
microsoft	windows_10	1809
microsoft	windows_server_2019	all versions

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0612
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0612

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-0612