Vulnerability Details : CVE-2017-0066
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0135 and CVE-2017-0140.
Products affected by CVE-2017-0066
- cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-0066
17.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 96 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-0066
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:N |
4.9
|
4.9
|
NIST | |
|
4.2
|
MEDIUM | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N |
1.6
|
2.5
|
NIST |
References for CVE-2017-0066
-
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0066
CVE-2017-0066 | Microsoft Edge Security Feature Bypass VulnerabilityPatch;Vendor Advisory
-
http://www.securityfocus.com/bid/96655
Microsoft Edge CVE-2017-0066 Security Bypass VulnerabilityThird Party Advisory;VDB Entry
-
http://www.securitytracker.com/id/1038006
Microsoft Edge Multiple Flaws Let Remote Users Bypass Security Restrictions, Spoof URLs, Obtain Potentially Sensitive Information, and Execute Arbitrary Code - SecurityTracker
Jump to