Cyber Resilience

CVE-2017-0210

Microsoft Internet Explorer 10 … 11

CISA KEVActive ExploitationEUVD Exploited
Published
12 April 2017
Modified
22 April 2026
KEV Added
24 May 2022
Patch / advisory
CVSS Score v3.1 8.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.20 97th percentile
Risk Priority 90 floored blend · peak EPSS

Summary

CVE-2017-0210 is a high-severity an unspecified weakness vulnerability in Microsoft Internet Explorer. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 3% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

An elevation of privilege vulnerability tracked as CVE-2017-0210 affects Internet Explorer when the browser fails to properly enforce cross-domain policies. This flaw permits an attacker to access information from one domain and inject it into another, as described in the official disclosure published on 2017-04-12 with a CVSS 3.1 base score of 8.8.

An unauthenticated remote attacker can exploit the issue over the network by convincing a user to visit a malicious web page, after which the attacker can read or modify content across domain boundaries with high impact to confidentiality, integrity, and availability. No prior authentication or special privileges are required on the target system.

The Microsoft Security Response Center advisory at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 and related vendor bulletins provide official mitigation guidance and patch information for affected Internet Explorer installations.

EU & UK References

Vulnerability Data

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

CWE(s)
KEV Date Added
24 May 2022

Related Threats

CVEs Like This One

CVE-2017-0222Same product: Microsoft Internet Explorerboth on KEV
CVE-2017-0263Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0213Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-8543Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-8759Same product: Microsoft Windows 10 1507both on KEV
CVE-2017-0149Same product: Microsoft Internet Explorerboth on KEV
CVE-2017-0059Same product: Microsoft Internet Explorerboth on KEV
CVE-2017-8464Same product: Microsoft Windows 10 1511both on KEV
CVE-2018-8373Same product: Microsoft Internet Explorerboth on KEV
CVE-2016-3298Same product: Microsoft Internet Explorerboth on KEV

Affected Assets

microsoft
internet explorer
10, 11

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References