Skip to content
OpenAdvisories
Unscored CVE-2017-0154 EUVD-2017-0521GHSA-3cfq-pxwf-wqwq

Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attac…

Published Mar 17, 2017 · Updated Aug 5, 2024 · Assigned by microsoft

Description

Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "Internet Explorer Elevation of Privilege Vulnerability."

Affected products

VendorProductAffectedFixed
Microsoft Internet Explorer Internet Explorer 11 in Windows 10, 1511, 1606, and Windows Server 2016 —

References