CVE-2019-1220

4.3 mediumEPSS 3.8%

Medium (4.3) in microsoft. EPSS 3.8% chance of exploitation in the next 30 days.

A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft Browser Security Feature Bypass Vulnerability'.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-425
Published: 2019-09-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge
microsoft:internet_explorer

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1220
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1220

Check your stack JSON