CVE-2017-0210
Microsoft Internet Explorer 10 … 11
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSummary
CVE-2017-0210 is a high-severity an unspecified weakness vulnerability in Microsoft Internet Explorer. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 3% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
An elevation of privilege vulnerability tracked as CVE-2017-0210 affects Internet Explorer when the browser fails to properly enforce cross-domain policies. This flaw permits an attacker to access information from one domain and inject it into another, as described in the official disclosure published on 2017-04-12 with a CVSS 3.1 base score of 8.8.
An unauthenticated remote attacker can exploit the issue over the network by convincing a user to visit a malicious web page, after which the attacker can read or modify content across domain boundaries with high impact to confidentiality, integrity, and availability. No prior authentication or special privileges are required on the target system.
The Microsoft Security Response Center advisory at https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 and related vendor bulletins provide official mitigation guidance and patch information for affected Internet Explorer installations.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2017-0576
Vulnerability Data
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."
- CWE(s)
- KEV Date Added
- 24 May 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.