CVE-2017-0135

—

CVSS 3.0

4.2 medium

EPSS

8%p94

Published

Mar 17, 2017 (Mar 17, 2017)

Modified

Jun 17, 2026

Description

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0066 and CVE-2017-0140.

Vendors: microsoft
Products: edge
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (7.7%)

In the news0 stories

No ingested article mentions this CVE yet.