CVE-2017-11872 - CVE House
Back to Database
Status published Medium CVE-2017-11872

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows...

Vulnerability Description

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attacker's choice, due to how Microsoft Edge handles redirect requests, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11874.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-11872

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Microsoft Corporation

View all reports →

Affected Software

Microsoft Edge
Vulnerable Versions:
Microsoft Windows 10 1607, 1703, and Windows Server 2016.

Timeline

Official Publish: November 15th, 2017
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.