Not rated
CVE-2017-8504 Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin…
Description
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8498.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Edge | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 98892 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Edge
The 90 CVEs of Microsoft Edge →
CVE-2018-0879
Microsoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects in memory, aka…
Not rated
CVE-2018-0893
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due…
Not rated
CVE-2018-0876
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due…
Not rated
CVE-2018-0889
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due…
Not rated