ID CVE-2017-0002
Summary Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
msbulletin via4
bulletin_id MS17-001
bulletin_url
date 2017-01-10T00:00:00
impact Elevation of Privilege
knowledgebase_id 3214288
knowledgebase_url
severity Important
title Security Update for Microsoft Edge
refmap via4
bid 95284
sectrack 1037573
Last major update 03-10-2019 - 00:03
Published 10-01-2017 - 21:59
Last modified 03-10-2019 - 00:03
Back to Top