What’s Vulnerable › Vulnerabilities

CVE-2017-8555

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-15 · updated 2026-06-17
• Weakness: CWE-20

Description

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8523 and CVE-2017-8530.

Affected products

• Microsoft Edge: all versions
• Microsoft Edge: Microsoft Windows 10 1703.

References

• http://www.securityfocus.com/bid/98956
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8555
• http://www.securityfocus.com/bid/98956
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8555

Get alerted when CVE-2017-8555 or the next vulnerability affects your stack