CVE-2018-0803

Name of the Vulnerable Software and Affected Versions: Microsoft Edge in Microsoft Windows 10 versions Gold, 1511, 1607, 1703, 1709, and Windows Server 2016

Description: The issue allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies. An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies.

Recommendations: For Microsoft Edge in Microsoft Windows 10 versions Gold, 1511, 1607, 1703, 1709, and Windows Server 2016, update to a version that properly enforces cross-domain policies to prevent elevation of privilege. At the moment, there is no information about a newer version that contains a fix for this vulnerability.