CVE-2017-0241

5.3 mediumEPSS 2.9%

Medium (5.3) in microsoft edge. EPSS 2.9% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of the Internet Zone, aka "Microsoft Edge Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0233.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
Published: 2017-05-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge

References

http://www.securityfocus.com/bid/98208
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0241
http://www.securityfocus.com/bid/98208
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0241

Check your stack JSON