CVE-2017-8723

CVSS 3.0: 4.3 medium
EPSS: 4%p91
Published: Sep 13, 2017 · Sep 13, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-8723 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8754.

Vendors: microsoft

Products: edge

Weakness: CWE-20

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news

2 stories

September Patch Tuesday, patch your Windows now to avoid ugly surprises.

Security AffairsOct 18, 22:13 UTC · Oct 18, 2017VulnerabilityExploitedCVE-2017-8759 CVE-2017-8746 CVE-2017-8723+13 · 1 read

Immediately Patch Windows 0-Day Flaw That's Being Used to Spread Spyware

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2017VulnerabilityExploitedCVE-2017-8759 CVE-2017-8746 CVE-2017-8723+12 · 1 read