Edge (Android) vulnerability CVE-2020-8913

[Noel Burgess]

There have been several articles based on Check Point's blog post yesterday about this, claiming that Edge (i.a.) is still vulnerable. Has the Android app not yet been patched to combat this?

 Widespread android applications still exposed to vulnerability on google play core library - Check P... 

Android apps with 200 million installs vulnerable to security bug (bleepingcomputer.com) 

@Eric_Lawrence @MissyQ @Deleted 

[#2]

@Noel Burgess 

Microsoft Edge team would be able to response to this issue.

However, as it has been shown in the demo , there is a need to install malicious application to perform this action and by default Android will block running apps from untrusted sources and I always recommend Android user to use Anti-Malware product (there are plenty of free apps on Google Play).

[#3]

@Noel Burgess We appreciate you reaching out with this concern, as we take security seriously. We’re aware of reports and are looking into them.

Fawkes (they/them)
Program Manager & Community Manager - Microsoft Edge

[#4]

Has the Android app not yet been patched to combat this?

@Deleted  I'll take that as a 'No', then 😉

[#5]

Or it would only means "i don't know i will report it anyway to be sure they know" ^^.

[#6 · Accepted solution]

To wrap this up, here is the response from the Edge team on 10 December:

This has been addressed in the latest version of Microsoft Edge on Android. We encourage you to update the app from the Google Play Store and ensure you are on version 45.11.2.5116.