CVE-2017-11863

6.1 mediumEPSS 3.5%

Medium (6.1) in microsoft edge. EPSS 3.5% chance of exploitation in the next 30 days.

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2017-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge

References

http://www.securityfocus.com/bid/101748
http://www.securitytracker.com/id/1039801
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11863
http://www.securityfocus.com/bid/101748
http://www.securitytracker.com/id/1039801

Check your stack JSON