medium5.3
CVE-2016-3392
The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended access restri…
Impact
The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended access restrictions via a crafted web site, aka "Microsoft Browser Security Feature Bypass Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Edge | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/93401
- http://www.securitytracker.com/id/1036993
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
- http://www.securityfocus.com/bid/93401
- http://www.securitytracker.com/id/1036993
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119