CVE-2017-8650

Description

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to exploit a security feature bypass due to Microsoft Edge not properly enforcing same-origin policies, aka "Microsoft Edge Security Feature Bypass Vulnerability".

Weakness classification

• CWE-346: Origin Validation Error

Primary references

• secure@microsoft.com — Third Party Advisory, VDB Entry
• secure@microsoft.com — Third Party Advisory, VDB Entry
• secure@microsoft.com — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory