CVE-2017-8723: Input Validation
First published: Wed Sep 13 2017(Updated: )
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8754.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Edge | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1511 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows Server 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-8723?
CVE-2017-8723 has a medium severity rating due to its potential for exploitation via social engineering.
How do I fix CVE-2017-8723?
To remediate CVE-2017-8723, ensure that you have applied the latest security updates for Microsoft Edge.
What versions of Microsoft Edge are affected by CVE-2017-8723?
CVE-2017-8723 affects Microsoft Edge on Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
Is CVE-2017-8723 a browser vulnerability?
Yes, CVE-2017-8723 is a vulnerability specifically found in the Microsoft Edge browser.
Can CVE-2017-8723 lead to remote code execution?
No, CVE-2017-8723 primarily allows for spoofing attacks rather than direct remote code execution.
- agent/type
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/remedy
- agent/references
- agent/severity
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- vendor/microsoft
- canonical/microsoft edge
- canonical/microsoft windows 10
- version/microsoft windows 10/1511
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- canonical/microsoft windows server 2016