CVE-2017-0002

High · 8.8

CVSS

8.8

EPSS

14.9%

Published

Jan 10, 2017

CISA due date

—

The record

Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege Vulnerability."

Affected packages

Ecosystem	Package	Introduced	Fixed