CVE-2020-1462

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for Business via Microsoft Edge (EdgeHTML-based) Information Disclosure Vulnerability'.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows Server 2019unspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows Server 2016unspecified

References

Timeline

Published
Jul 14, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-146204.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.20 and prioCVE-2020-146215.3Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SECVE-2020-146224.9Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are CVE-2020-146234.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. EaCVE-2020-146244.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.20 and priCVE-2020-146259.8Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are CVE-2020-146268.1Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).CVE-2020-146276.1Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affectedCVE-2020-146288.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are PriorCVE-2020-146296.0Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are PriorCVE-2020-14637.8An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStreamCVE-2020-146307.5Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications (component: File Upload). Sup
CVE-2020-1462: Medium severity, CVSS 4.3 | Vulnix