CVE-2017-8504: Microsoft Edge

Medium severity, CVSS 4.3. EPSS: 5.3% chance of exploitation in the next 30 days.

Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8498.

Affected products

• Microsoft Edge: any version

Published 2017-06-15. Last modified 2026-06-17.