CVEvulnerability
CVE-2017-0066
4.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-03-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.2 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:N
Description
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0135 and CVE-2017-0140.
Affected configurations
• microsoft edge
References
- http://www.securityfocus.com/bid/96655 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038006 www.securitytracker.com
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0066 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/96655 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038006 www.securitytracker.com
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0066 Patch, Vendor Advisory