CVE-2017-0241

Name of the Vulnerable Software and Affected Versions Microsoft Edge (affected versions not specified)

Description The issue arises when Microsoft Edge renders a domain-less page in the URL. This could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of the Internet Zone. To exploit the issue, an attacker would have to convince a user to browse to a maliciously created webpage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.