QwikSec

Security Database

CVE

CWE

Training

CVE-2017-0154

Published: Mar 17, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "Internet Explorer Elevation of Privilege Vulnerability."

Vendor	Product	Versions
Microsoft Corporation	Internet Explorer	affected `Internet Explorer 11 in Windows 10, 1511, 1606, and Windows Server 2016`

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0154

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.