CVE-2017-11863: Microsoft Edge

Medium severity, CVSS 6.1. EPSS: 3.5% chance of exploitation in the next 30 days.

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874.

Affected products

• Microsoft Edge: any version

Published 2017-11-15. Last modified 2026-06-17.