Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka Microsoft Edge Elevation of Privilege Vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Edge | Microsoft | * | * |
References
- http://www.securityfocus.com/bid/95284
- http://www.securitytracker.com/id/1037573
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-001
- http://www.securityfocus.com/bid/95284
- http://www.securitytracker.com/id/1037573
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-001