Actively exploited · Published Apr 12, 2017 · Assigned by microsoft
CVE-2017-0210
High 8.8 Exploited
In plain English
A high-severity security flaw in Internet Explorer from Microsoft Corporation. Attackers are actively exploiting it in the wild (listed by CISA on May 24, 2022). The chance it is exploited in the next 30 days is estimated at 22.3% (higher than 98% of all known vulnerabilities). Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Jun 14, 2022.
Official description
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corporation | Internet Explorer | Internet Explorer 10 and Internet Explorer 11 |
References
- 97512 vdb-entry, x_refsource_BID
- 1038238 vdb-entry, x_refsource_SECTRACK
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0210 government-resource