CVE-2019-0678

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access…

published April 8, 2019

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06090 · 93.4th percentile
Published
2019-04-08T23:24Z
EPSS history
Timeline
  • 08 APR 23:24Z
    An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access…
    cvelistv5