CVE-2019-1413

CVE-2019-1413 describes a security feature bypass vulnerability in Microsoft Edge, affecting Windows 10, Windows Server 2016, and Windows Server 2019. This medium-severity vulnerability (CVSS 4.3) arises because Edge improperly handles extension requests, failing to prompt for host permissions for "all_urls." An attacker could exploit this by tricking a user into installing a malicious extension, leading to a low impact on integrity (I:L) without requiring privileges (PR:N) or affecting confidentiality or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, though it was addressed in Microsoft's November 2019 Patch Tuesday.