CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2017-02108.8/HIGHEPSS 22.3%CISA KEV
2017-04-12

Microsoft Internet Explorer Cross-Domain Policy Bypass Elevation of Privilege Vulnerability (CVE-2017-0210) Technical Advisory

[Affected Scope] Microsoft Internet Explorer 9, 10, and 11 running on Windows environments

[Impact] Attackers can bypass the Same-Origin Policy (SOP) to access sensitive information across domains and inject malicious scripts, leading to elevation of privilege

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable Internet Explorer and transition to modern browsers like Microsoft Edge

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse