CVE-2017-0066

MediumCVSS 4.2/10Last modified Jun 17, 2026

Description

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is different from those described in CVE-2017-0135 and CVE-2017-0140.

Metrics

CVSS 3.0 4.2/10CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Mar 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-00677.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-00684.3Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "MicrosoftCVE-2017-00694.3Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability." This vulnerCVE-2017-00707.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-00717.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-00728.8Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitraryCVE-2017-00734.3The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows CVE-2017-00745.4Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; WindowsCVE-2017-00757.6Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; WindowsCVE-2017-00765.4Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; WindowsCVE-2017-00777.8The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, CVE-2017-00787.8The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Wind