CVE-2017-0203

A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents

published April 12, 2017

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacker could trick a user into loading a web page with malicious content, aka "Microsoft Edge Security Feature Bypass Vulnerability."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03922 · 90.3th percentile
Published
2017-04-12T14:00Z
EPSS history
Timeline
  • 12 APR 14:00Z
    A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents
    cvelistv5