CVE-2018-0803 Vulnerability Details

Record summary

CVE-2018-0803 has a selected CVSS score of 4.2 (medium).

Description

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of Privilege Vulnerability".

Description source: CVE List

Affected products and versions

Product	Source	Version range	Status
Microsoft Edge Browse Microsoft Corporation / Microsoft Edge	CVE List	Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.	affected

References

102384vdb entry

http://www.securityfocus.com/bid/102384

1040100vdb entry

http://www.securitytracker.com/id/1040100

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2018-0803

portal.msrc.microsoft.comConfirmation

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0803