CVEvulnerability

CVE-2016-3392

5.3 MEDIUM Published 2016-10-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-10-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
CWE-284

Description

The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended access restrictions via a crafted web site, aka "Microsoft Browser Security Feature Bypass Vulnerability."

Affected configurations

• microsoft edge

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References