ADV200002 - Chromium Security Updates for Microsoft Edge Chromium

Page 1 of 3 123 LastLast
    ADV200002 - Chromium Security Updates for Microsoft Edge Chromium

    ADV200002 - Chromium Security Updates for Microsoft Edge Chromium

    Security Advisory ADV200002

    Last Updated: 08 May 2020 at 10:33
    ADV200002 | Chromium Security Updates for Microsoft Edge based on Chromium

    Security Advisory

    Published: 01/28/2020 | Last Updated : 05/07//2020

    This advisory will be updated whenever Microsoft releases a version of Microsoft Edge which incorporates publicly disclosed security updates from the Chromium project.

    History of Microsoft Edge (Chromium-based) Security Updates

    Microsoft Edge Version Date Released Based on Chromium Version Chrome Release Blog Highest Severity Fix in Release CVEs
    81.0.416.72 5/7/2020 81.0.4044.138 Chrome Releases Blog High CVE-2020-6831, CVE-2020-6464
    81.0.416.68 4/29/2020 81.0.4044.129 Chrome Releases Blog High CVE-2020-6461, CVE-2020-6462
    81.0.416.64 4/23/2020 81.0.4044.122 Chrome Releases Blog High CVE-2020-6458, CVE-2020-6459, CVE-2020-6460
    81.0.416.58 4/17/2020 81.0.4044.113 Chrome Releases Blog Critical CVE-2020-6457
    81.0.416.53 4/13/2020 81.0.4044.92 Chrome Releases Blog High CVE-2020-6454, CVE-2020-6423, CVE-2020-6455, CVE-2020-6430, CVE-2020-6456, CVE-2020-6431, CVE-2020-6432, CVE-2020-6433, CVE-2020-6434, CVE-2020-6435, CVE-2020-6436, CVE-2020-6437, CVE-2020-6438, CVE-2020-6439, CVE-2020-6440, CVE-2020-6441, CVE-2020-6442, CVE-2020-6443, CVE-2020-6444, CVE-2020-6445, CVE-2020-6446, CVE-2020-6447, CVE-2020-6448
    80.0.361.109 4/1/2020 80.0.3987.162 Chrome Releases Blog High CVE-2020-6450, CVE-2020-6451, CVE-2020-6452
    80.0.361.69 3/19/2020 80.0.3987.149 Chrome Releases Blog High CVE-2020-6422, CVE-2020-6424, CVE-2020-6425, CVE-2020-6426, CVE-2020-6427, CVE-2020-6428, CVE-2020-6429, CVE-2019-20503, CVE-2020-6449
    80.0.361.66 3/4/2020 80.0.3987.132 Chrome Releases Blog High CVE-2020-6420
    80.0.361.62 2/25/2020 80.0.3987.122 Chrome Releases Blog High CVE-2020-6407, CVE-2020-6418 *
    80.0.361.57 2/20/2020 80.0.3987.116 Chrome Releases Blog High CVE-2020-6383, CVE-2020-6384, CVE-2020-6386
    80.0.361.48 2/7/2020 80.0.3987.87 Chrome Releases Blog High CVE-2020-6381, CVE-2020-6382, CVE-2019-18197, CVE-2019-19926, CVE-2020-6385, CVE-2019-19880, CVE-2019-19925, CVE-2020-6387, CVE-2020-6388, CVE-2020-6389, CVE-2020-6390, CVE-2020-6391, CVE-2020-6392, CVE-2020-6393, CVE-2020-6394, CVE-2020-6395, CVE-2020-6396, CVE-2020-6397, CVE-2020-6398, CVE-2020-6399, CVE-2020-6400, CVE-2020-6401, CVE-2020-6402, CVE-2020-6404, CVE-2020-6405, CVE-2020-6406, CVE-2019-19923, CVE-2020-6408, CVE-2020-6409, CVE-2020-6410, CVE-2020-6411, CVE-2020-6412, CVE-2020-6413, CVE-2020-6414, CVE-2020-6415, CVE-2020-6416, CVE-2020-6417
    79.0.309.68 1/17/2020 79.0.3945.130 Chrome Releases Blog Critical CVE-2020-6378, CVE-2020-6379, CVE-2020-6380, CVE-2020-0601

    * CVE’s in bold have been reported to be exploited in the wild.

    How can I see the version of the browser?

    1. In your Microsoft Edge browser, click on the 3 dots (...) on the very right hand side of the window
    2. Click on Help and Feedback
    3. Click on About Microsoft Edge

    Security Updates

    To determine the support life cycle for your software version or edition, see the Microsoft Support Lifecycle.

    Product Platform Article Download Impact Severity Supersedence
    Microsoft Edge (Chromium-based) Release Notes Security Update

    Mitigations

    Microsoft has not identified any mitigating factors for this vulnerability.

    Workarounds

    Microsoft has not identified any workarounds for this vulnerability.

    Acknowledgements

    Microsoft recognizes the efforts of those in the security community who help us protect customers through coordinated vulnerability disclosure.

    See acknowledgements for more information.

    Disclaimer

    The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

    Revisions

    Version Date Description
    1.0 01/28/2020 Information published.
    1.1 01/29/2020 Updated link to release notes. This is an informational change only.
    1.2 01/30/2020 Updated details in the table in the description. This is an informational change only.
    2.0 02/07/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    3.0 02/21/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    4.0 02/25/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    5.0 03/04/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    6.0 03/19/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    6.1 03/23/2020 Added CVE-2020-6425 to latest release. This is an informational change only.
    7.0 04/02/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    8.0 04/14/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    9.0 04/17/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    10.0 04/24/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    11.0 04/29/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.
    12.0 05/07/2020 Updated advisory to announce a new version of Microsoft Edge (Chromium-based). Please see the table for more information.

    Source: https://portal.msrc.microsoft.com/en...sory/ADV200002


    Latest Microsoft Edge released for Windows

    Brink's Avatar Posted By: Brink
    28 Jan 2020


  1. Posts : 133
    win10
       #1

    Reminds me of the good old days when there was seperate updates for windows and internet explorer
      My Computer


  2. Posts : 385
    Windows 10
       #2

    dskiller said:
    Reminds me of the good old days when there was seperate updates for windows and internet explorer
    I see my Edge is running the current version 79.0.309.71. Did it update silently in the background? If so, is that how Edge updates will be delivered going forward?
      My Computer

  3. Brink's Avatar
    Posts : 56,847
    64-bit Windows 10 Pro for Workstations build 21376
    Thread Starter
       #3

    AllenChicago said:
    I see my Edge is running the current version 79.0.309.71. Did it update silently in the background? If so, is that how Edge updates will be delivered going forward?
    Hello,

    Microsoft Edge will automatically check for and install updates to the latest version by default, but you can manually check for updates to see if you have the latest version of Microsoft Edge install.

    How to Check for Updates in Microsoft Edge Chromium
      My Computers

  4. Cliff S's Avatar
    Posts : 25,637
    Win10 Pro, Win10 Pro N, Win10 Home, Windows 8.1 Pro, Ubuntu
       #4

    AllenChicago said:
    I see my Edge is running the current version 79.0.309.71. Did it update silently in the background? If so, is that how Edge updates will be delivered going forward?
    Brink said:
    Hello,

    Microsoft Edge will automatically check for and install updates to the latest version by default, but you can manually check for updates to see if you have the latest version of Microsoft Edge install.

    How to Check for Updates in Microsoft Edge Chromium
    If you want to turn off auto updating(not recommended, but I believe users should have the option)

    In Task Scheduler
    ADV200002 - Chromium Security Updates for Microsoft Edge Chromium-image.png

    Or you can set a time preference if you wish
    ADV200002 - Chromium Security Updates for Microsoft Edge Chromium-image.png
      My Computers


  5. Posts : 385
    Windows 10
       #5

    Thankyou BRINK and CLIFF. Since we have this wonderful forum reporting changes and updates, I'll just leave Edge set to Automatic Updating, and visit TenForums frequently to stay on top of things. Thanks again!
    -Allen
      My Computer

  6. Steve C's Avatar
    Posts : 6,365
    Windows 10 Pro 64 bit
       #6

    Which is more secure - Edge Chromium or Chrome by Google?
      My Computers

  7. Cliff S's Avatar
    Posts : 25,637
    Win10 Pro, Win10 Pro N, Win10 Home, Windows 8.1 Pro, Ubuntu
       #7

    Steve C said:
    Which is more secure - Edge Chromium or Chrome by Google?
    If your system is capable of using Application Guard

    Otherwise I would say they are about the same if you set them both up the same way, including and any Flags in about://flags
      My Computers

  8. Brink's Avatar
    Posts : 56,847
    64-bit Windows 10 Pro for Workstations build 21376
    Thread Starter
       #8

    UPDATE:

    First post updated on February 7, 2020.
      My Computers

  9. NMI's Avatar
    NMI
    Posts : 720
    Windows 10 Pro, Version 20H2
       #9

    I get 403-Forbidden on the Release Notes link here, but not on the Release Notes link in the Security Advisory.

    Perhaps the link changed since last month?
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:02.
Find Us




Windows 10 Forums