CVE-2017-0210

State: Published
Severity: 8.8 High
Published: Apr 12, 2017
Updated: Oct 21, 2025
Reserved: Sep 9, 2016

Description

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Internet ExplorerMicrosoft Corporation	Internet Explorer 10 and Internet Explorer 11Affected

References

97512vdb-entry
1038238vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0210government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.