CVE-2017-0203: Microsoft Edge

Medium severity, CVSS 4.3. EPSS: 3.9% chance of exploitation in the next 30 days.

A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacker could trick a user into loading a web page with malicious content, aka "Microsoft Edge Security Feature Bypass Vulnerability."

Affected products

• Microsoft Edge: any version

Published 2017-04-12. Last modified 2026-06-17.