CVE-2017-0140

CVE-2017-0140: vulnerability in Microsoft Corporation Edge

Published · Updated

Follow this CVE+ Monitor Microsoft Edge

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 29%
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0066 and CVE-2017-0135.
Affected products
Microsoft Corporation · Edge
Related CVEs — Microsoft Corporation Edge

In the same product, most dangerous first.

CVE-2017-0011—CVE-2017-0011EPSS 42.4%CVE-2017-0017—CVE-2017-0017EPSS 42.0%CVE-2017-0066—CVE-2017-0066EPSS 29.9%CVE-2017-0065—CVE-2017-0065EPSS 27.4%CVE-2017-0205—CVE-2017-0205EPSS 23.6%CVE-2017-0208—CVE-2017-0208EPSS 15.3%