Not rated
CVE-2017-0017 The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS)…
Description
The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0065, and CVE-2017-0068.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Edge | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 96078 www.securityfocus.com
- 1038006 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of Edge
The 13 CVEs of Edge →
CVE-2017-0205
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory
Not rated
CVE-2017-0093
A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when…
Not rated
CVE-2017-0208
An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly…
Not rated
CVE-2017-0200
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory
Not rated