CVE-2017-0002

—

CVSS 3.0

8.8 high

EPSS

15%p96

Published

Jan 10, 2017 (Jan 10, 2017)

Modified

Jun 17, 2026

Description

Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege Vulnerability."

Vendors: microsoft
Products: edge
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (14.9%)

In the news2 stories

Microsoft Releases 4 Security Updates — Smallest Patch Tuesday Ever!

The Hacker NewsJan 11, 09:26 UTC · Jan 11, 2017Vulnerability in the wildCVE-2017-0002 CVE-2017-0003 CVE-2017-0004

Microsoft Patch Tuesday

Cisco TalosJan 10, 20:28 UTC · Jan 10, 2017Vulnerability CVE-2017-0003 CVE-2017-0002 CVE-2017-0004