CVE-2018-0803: Medium severity Microsoft Edge vulnerability
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of Privilege Vulnerability".
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0803?
CVE-2018-0803 has been assigned a severity rating of important by Microsoft due to its potential for elevation of privilege.
How do I fix CVE-2018-0803?
To mitigate CVE-2018-0803, users should ensure Microsoft Edge is updated to the latest version provided by Microsoft.
What versions of Microsoft Edge are affected by CVE-2018-0803?
CVE-2018-0803 affects several versions of Microsoft Edge on Windows 10 and Windows Server 2016, specifically those prior to updates released by Microsoft.
Is my version of Windows vulnerable to CVE-2018-0803?
Only specific older versions of Windows 10 and Windows Server 2016 are affected by CVE-2018-0803; later versions are not vulnerable.
What type of vulnerability is CVE-2018-0803 classified as?
CVE-2018-0803 is classified as an elevation of privilege vulnerability affecting Microsoft Edge's handling of cross-domain policies.