CVE-2017-8504

Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch…

published June 15, 2017

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8498.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05253 · 92.5th percentile
Published
2017-06-15T01:00Z
EPSS history
Timeline
  • 15 JUN 01:00Z
    Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch…
    cvelistv5