CVEvulnerability
CVE-2018-0803
4.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-01-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.2 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-863
Description
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of Privilege Vulnerability".
Affected configurations
• microsoft edge
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://www.securityfocus.com/bid/102384 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040100 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0803 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/102384 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040100 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0803 Patch, Vendor Advisory