CVE-2017-0002: Microsoft Edge

High severity, CVSS 8.8. EPSS: 14.9% chance of exploitation in the next 30 days.

Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege Vulnerability."

Affected products

• Microsoft Edge: any version

Published 2017-01-10. Last modified 2026-06-17.