CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Internet Explorer Cross-Domain Policy Bypass Elevation of Privilege Vulnerability (CVE-2017-0210) Technical Advisory
[Affected Scope] Microsoft Internet Explorer 9, 10, and 11 running on Windows environments
[Impact] Attackers can bypass the Same-Origin Policy (SOP) to access sensitive information across domains and inject malicious scripts, leading to elevation of privilege
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable Internet Explorer and transition to modern browsers like Microsoft Edge
Mozilla Firefox Built-in PDF Viewer Same Origin Policy (SOP) Bypass and Arbitrary File Disclosure (CVE-2015-4495)
[Affected Scope] Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2
[Impact] Remote attackers can bypass the Same Origin Policy (SOP) to read arbitrary local files (e.g., SSH keys, configuration files) and exfiltrate them without user interaction
[Mitigation] Immediately update Mozilla Firefox and Firefox ESR to the latest secure versions (39.0.3 / 38.1.1 or higher)