CVE-2017-0017

MEDIUM

Microsoft Edge - XSS

Title source: rule

Description

The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0065, and CVE-2017-0068.

References (3)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/96078

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038006

[Patch, Vendor Advisory] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0017

Scores

CVSS v3 6.1

EPSS 0.0189

EPSS Percentile 83.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE

CWE-79

Status published

Affected Products (2)

microsoft/edge

Microsoft Corporation/Edge < The RegEx class in the XSS filter in Microsoft Edge

Timeline

Published Mar 17, 2017

Tracked Since Feb 18, 2026