ADV200002 - Chromium Security Updates for Microsoft Edge Chromium

Page 1 of 3 123 LastLast
    ADV200002 - Chromium Security Updates for Microsoft Edge Chromium

    ADV200002 - Chromium Security Updates for Microsoft Edge Chromium

    Security Advisory ADV200002

    Last Updated: 08 May 2020 at 10:33

    ADV200002 | Chromium Security Updates for Microsoft Edge based on Chromium

    Security Advisory

    Published: 01/28/2020 | Last Updated : 05/07//2020

    This advisory will be updated whenever Microsoft releases a version of Microsoft Edge which incorporates publicly disclosed security updates from the Chromium project.

    History of Microsoft Edge (Chromium-based) Security Updates

    Microsoft Edge Version Date Released Based on Chromium Version Chrome Release Blog Highest Severity Fix in Release CVEs
    81.0.416.72 5/7/2020 81.0.4044.138 Chrome Releases Blog High CVE-2020-6831, CVE-2020-6464
    81.0.416.68 4/29/2020 81.0.4044.129 Chrome Releases Blog High CVE-2020-6461, CVE-2020-6462
    81.0.416.64 4/23/2020 81.0.4044.122 Chrome Releases Blog High CVE-2020-6458, CVE-2020-6459, CVE-2020-6460
    81.0.416.58 4/17/2020 81.0.4044.113 Chrome Releases Blog Critical CVE-2020-6457
    81.0.416.53 4/13/2020 81.0.4044.92 Chrome Releases Blog High CVE-2020-6454, CVE-2020-6423, CVE-2020-6455, CVE-2020-6430, CVE-2020-6456, CVE-2020-6431, CVE-2020-6432, CVE-2020-6433, CVE-2020-6434, CVE-2020-6435, CVE-2020-6436, CVE-2020-6437, CVE-2020-6438, CVE-2020-6439, CVE-2020-6440, CVE-2020-6441, CVE-2020-6442, CVE-2020-6443, CVE-2020-6444, CVE-2020-6445, CVE-2020-6446, CVE-2020-6447, CVE-2020-6448
    80.0.361.109 4/1/2020 80.0.3987.162 Chrome Releases Blog High CVE-2020-6450, CVE-2020-6451, CVE-2020-6452
    80.0.361.69 3/19/2020 80.0.3987.149 Chrome Releases Blog High CVE-2020-6422, CVE-2020-6424, CVE-2020-6425, CVE-2020-6426, CVE-2020-6427, CVE-2020-6428, CVE-2020-6429, CVE-2019-20503, CVE-2020-6449
    80.0.361.66 3/4/2020 80.0.3987.132 Chrome Releases Blog High CVE-2020-6420
    80.0.361.62 2/25/2020 80.0.3987.122 Chrome Releases Blog High CVE-2020-6407, CVE-2020-6418 *
    80.0.361.57 2/20/2020 80.0.3987.116 Chrome Releases Blog High CVE-2020-6383, CVE-2020-6384, CVE-2020-6386
    80.0.361.48 2/7/2020 80.0.3987.87 Chrome Releases Blog High CVE-2020-6381, CVE-2020-6382, CVE-2019-18197, CVE-2019-19926, CVE-2020-6385, CVE-2019-19880, CVE-2019-19925, CVE-2020-6387, CVE-2020-6388, CVE-2020-6389, CVE-2020-6390, CVE-2020-6391, CVE-2020-6392, CVE-2020-6393, CVE-2020-6394, CVE-2020-6395, CVE-2020-6396, CVE-2020-6397, CVE-2020-6398, CVE-2020-6399, CVE-2020-6400, CVE-2020-6401, CVE-2020-6402, CVE-2020-6404, CVE-2020-6405, CVE-2020-6406, CVE-2019-19923, CVE-2020-6408, CVE-2020-6409, CVE-2020-6410, CVE-2020-6411, CVE-2020-6412, CVE-2020-6413, CVE-2020-6414, CVE-2020-6415, CVE-2020-6416, CVE-2020-6417
    79.0.309.68 1/17/2020 79.0.3945.130 Chrome Releases Blog Critical CVE-2020-6378, CVE-2020-6379, CVE-2020-6380, CVE-2020-0601

    * CVE’s in bold have been reported to be exploited in the wild.

    How can I see the version of the browser?

    1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right hand side of the window
    2. Click on Help and Feedback
    3. Click on About Microsoft Edge

    Security Updates

    To determine the support life cycle for your software version or edition, see the Microsoft Support Lifecycle.

    Product Platform Article Download Impact Severity Supersedence
    Microsoft Edge (Chromium-based) Release Notes Security Update

    Mitigations

    Microsoft has not identified any mitigating factors for this vulnerability.

    Workarounds

    Microsoft has not identified any workarounds for this vulnerability.

    Acknowledgements

    Microsoft recognizes the efforts of those in the security community who help us protect customers through coordinated vulnerability disclosure.

    See acknowledgements for more information.

    Disclaimer

    The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

    Revisions

    Version Date Description
    1.0 01/28/2020 Information published.
    1.1 01/29/2020 Updated link to release notes. This is an informational change only.
    1.2 01/30/2020 Updated details in the table in the description. This is an informational change only.
    2.0 02/07/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    3.0 02/21/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    4.0 02/25/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    5.0 03/04/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    6.0 03/19/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    6.1 03/23/2020 Added CVE-2020-6425 to latest release. This is an informational change only.
    7.0 04/02/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    8.0 04/14/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    9.0 04/17/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    10.0 04/24/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    11.0 04/29/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    12.0 05/07/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.

    Source: https://portal.msrc.microsoft.com/en...sory/ADV200002


    Latest Microsoft Edge released for Windows

    Brink's Avatar Posted By: Brink
    28 Jan 2020


  1. dskiller
    Posts : 135
    win10
       New #1

    Reminds me of the good old days when there was seperate updates for windows and internet explorer
      My Computer
    Quote Quote

  3. AllenChicago
    Posts : 408
    Windows 10
       New #2

    dskiller said:
    Reminds me of the good old days when there was seperate updates for windows and internet explorer
    I see my Edge is running the current version 79.0.309.71. Did it update silently in the background? If so, is that how Edge updates will be delivered going forward?
      My Computer
    Quote Quote

  4. Brink
    Posts : 68,988
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #3

    AllenChicago said:
    I see my Edge is running the current version 79.0.309.71. Did it update silently in the background? If so, is that how Edge updates will be delivered going forward?
    Hello,

    Microsoft Edge will automatically check for and install updates to the latest version by default, but you can manually check for updates to see if you have the latest version of Microsoft Edge install.

    How to Check for Updates in Microsoft Edge Chromium
      My Computers
    Quote Quote

  6. Cliff S
    Posts : 27,183
    Win11 Pro, Win10 Pro N, Win10 Home, Windows 8.1 Pro, Ubuntu
       New #4

    AllenChicago said:
    I see my Edge is running the current version 79.0.309.71. Did it update silently in the background? If so, is that how Edge updates will be delivered going forward?
    Brink said:
    Hello,

    Microsoft Edge will automatically check for and install updates to the latest version by default, but you can manually check for updates to see if you have the latest version of Microsoft Edge install.

    How to Check for Updates in Microsoft Edge Chromium
    If you want to turn off auto updating(not recommended, but I believe users should have the option)

    In Task Scheduler
    ADV200002 - Chromium Security Updates for Microsoft Edge Chromium-image.png

    Or you can set a time preference if you wish
    ADV200002 - Chromium Security Updates for Microsoft Edge Chromium-image.png
      My Computers
    Quote Quote

  7. AllenChicago
    Posts : 408
    Windows 10
       New #5

    Thankyou BRINK and CLIFF. Since we have this wonderful forum reporting changes and updates, I'll just leave Edge set to Automatic Updating, and visit TenForums frequently to stay on top of things. Thanks again!
    -Allen
      My Computer
    Quote Quote

  8. Steve C
    Posts : 7,905
    Windows 11 Pro 64 bit
       New #6

    Which is more secure - Edge Chromium or Chrome by Google?
      My Computers
    Quote Quote

  9. Cliff S
    Posts : 27,183
    Win11 Pro, Win10 Pro N, Win10 Home, Windows 8.1 Pro, Ubuntu
       New #7

    Steve C said:
    Which is more secure - Edge Chromium or Chrome by Google?
    If your system is capable of using Application Guard

    Otherwise I would say they are about the same if you set them both up the same way, including and any Flags in about://flags
      My Computers
    Quote Quote

  10. Brink
    Posts : 68,988
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #8

    UPDATE:

    First post updated on February 7, 2020.
      My Computers
    Quote Quote

  12. NMI
    Posts : 1,095
    Windows 11 Pro, Version 22H2
       New #9

    I get 403-Forbidden on the Release Notes link here, but not on the Release Notes link in the Security Advisory.

    Perhaps the link changed since last month?
      My Computer
    Quote Quote

 

  Related Discussions
Edge Chromium security updates?
in Browsers and Email

Will all the security updates for Edge Chromium be automatically updated in the background from Google or will the security updates would still be from the Windows Updates?
Source: https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-chromium-based-microsoft-edge/ba-p/1111863
Source: https://techcommunity.microsoft.com/t5/Microsoft-Security-Baselines/Security-baseline-DRAFT-for-Chromium-based-Microsoft-Edge/ba-p/1066051
How to Check for Updates in Microsoft Edge Chromium Microsoft has adopted the Chromium open source project in the development of Microsoft Edge on the desktop to create better web compatibility. This new Microsoft Edge runs on the same Chromium...
Source: https://techcommunity.microsoft.com/t5/Microsoft-Security-Baselines/Security-baseline-DRAFT-for-Chromium-based-Microsoft-Edge/ba-p/949991 1187773101473296384
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 00:20.
Find Us




Windows 10 Forums