KLA10940
Privilege escalation vulnerability in Microsoft Edge

Updated: 06/03/2020
Detect date
?
01/10/2017
Severity
?
Critical
Description

An elevation of privilege vulnerability was found in Microsoft Edge. By exploiting this vulnerability malicious users can bypass the Same Origin Policy and gain privileges. This vulnerability can be exploited remotely via vectors involving data: URLs and about:blank URL.

Affected products

Microsoft Edge

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

MS17-001
CVE-2017-0002

Impacts
?
PE 
[?]
Related products
Microsoft Edge
CVE-IDS
?
Microsoft official advisories
Microsoft Security Update Guide
KB list

3210720
3210721
3213986

Find out the statistics of the vulnerabilities spreading in your region