CVE-2017-8599

6.5 mediumEPSS 5.1%

Medium (6.5) in microsoft edge. EPSS 5.1% chance of exploitation in the next 30 days.

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability".

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 5.1% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2017-07-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge

References

http://www.securityfocus.com/bid/99393
http://www.securitytracker.com/id/1038858
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8599
http://www.securityfocus.com/bid/99393
http://www.securitytracker.com/id/1038858

Check your stack JSON