Forum Discussion

Noel Burgess's avatar
Noel Burgess
Iron Contributor
Dec 04, 2020
Solved

Edge (Android) vulnerability CVE-2020-8913

There have been several articles based on Check Point's blog post yesterday about this, claiming that Edge (i.a.) is still vulnerable. Has the Android app not yet been patched to combat this?

 

 Widespread android applications still exposed to vulnerability on google play core library - Check Point Software 

Android apps with 200 million installs vulnerable to security bug (bleepingcomputer.com) 

 

Eric_Lawrence MissyQ Deleted 

  • To wrap this up, here is the response from the Edge team on 10 December:

    This has been addressed in the latest version of Microsoft Edge on Android. We encourage you to update the app from the Google Play Store and ensure you are on version 45.11.2.5116.

5 Replies

  • Noel Burgess's avatar
    Noel Burgess
    Iron Contributor

    To wrap this up, here is the response from the Edge team on 10 December:

    This has been addressed in the latest version of Microsoft Edge on Android. We encourage you to update the app from the Google Play Store and ensure you are on version 45.11.2.5116.
  • Noel Burgess We appreciate you reaching out with this concern, as we take security seriously. We’re aware of reports and are looking into them.

     

    Fawkes (they/them)
    Program Manager & Community Manager - Microsoft Edge

    • Noel Burgess's avatar
      Noel Burgess
      Iron Contributor

      Has the Android app not yet been patched to combat this?

      Deleted  I'll take that as a 'No', then 😉

      • Wittycat's avatar
        Wittycat
        Iron Contributor
        Or it would only means "i don't know i will report it anyway to be sure they know" ^^.
  • Noel Burgess 

    Microsoft Edge team would be able to response to this issue.

    However, as it has been shown in the demo , there is a need to install malicious application to perform this action and by default Android will block running apps from untrusted sources and I always recommend Android user to use Anti-Malware product (there are plenty of free apps on Google Play).

Resources