Not rated
CVE-2017-0135 Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows,…
Description
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0066 and CVE-2017-0140.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Edge | Versions not published |
References
- www.freebuf.com www.freebuf.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 1038006 www.securitytracker.com
- medium.com medium.com
- 96656 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Edge
The 13 CVEs of Edge →
CVE-2017-0205
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory
Not rated
CVE-2017-0093
A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when…
Not rated
CVE-2017-0208
An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly…
Not rated
CVE-2017-0200
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory
Not rated