CVE-2017-0066

MEDIUM 4.2CVE-2017-0066 · Published 17/03/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0135 and CVE-2017-0140.

References

securityfocus.com/bid/96655 · Third Party Advisory
securitytracker.com/id/1038006
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0066 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free