CVE-2017-0066

Medium · 4.2

CVSS

4.2

EPSS

29.9%

Published

Mar 17, 2017

CISA due date

—

The record

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0135 and CVE-2017-0140.

Affected packages

Ecosystem	Package	Introduced	Fixed