CVE-2017-8555

MEDIUM 4.3CVE-2017-8555 · Published 15/06/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8523 and CVE-2017-8530.

References

securityfocus.com/bid/98956 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8555 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free