CVE-2017-8592

MEDIUM

Microsoft Windows 10 - Information Disclosure

Title source: rule

Description

Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability when they improperly handle redirect requests, aka "Microsoft Browser Security Feature Bypass".

References (4)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/99396

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038859

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038860

[Patch, Vendor Advisory] https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8592

Scores

CVSS v3 6.5

EPSS 0.2944

EPSS Percentile 96.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (17)

microsoft/windows_10

microsoft/windows_10

microsoft/windows_10

microsoft/windows_10

microsoft/windows_7

microsoft/windows_8.1

microsoft/windows_rt_8.1

microsoft/windows_server_2008

microsoft/windows_server_2008

microsoft/windows_server_2012

... and 7 more

Published Jul 11, 2017

Tracked Since Feb 18, 2026