CVE-2017-0154

Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access…

published March 17, 2017

CVSS

—

EPSS

11%

Percentile

95.7

In the wild

Unconfirmed

What it is

Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "Internet Explorer Elevation of Privilege Vulnerability."

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.10565 · 95.7th percentile
Published: 2017-03-17T00:00Z

EPSS history

Timeline

17 MAR 00:00Z
Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access…
cvelistv5