CVE-2020-1329High

Microsoft Bing Search Spoofing Vulnerability

Published
June 9, 2020
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content. An attacker who successfully exploited this vulnerability could trick a user into believing that the user was on a legitimate website. The specially crafted website, when browsed using the app could spoof the URL and serve malicious content. To exploit the vulnerability, the user must either browse a malicious website with Bing Search App or be redirected to it by the attacker. The security update addresses the vulnerability by correcting how Microsoft Bing Search for Android displays the site URL.

🎯 Affected products1

  • Microsoft Bing Search for Android

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)