Microsoft Edge Security Feature Bypass in Windows 10 and Windows Server

CVE-2017-8599

Summary

A vulnerability in Microsoft Edge allows an attacker to exploit a failure in the Content Security Policy (CSP) validation process. This weakness enables malicious actors to trick users into loading harmful web pages by delivering specially crafted documents. The issue affects various versions of Windows 10, including Gold, 1511, 1607, and 1703, as well as Windows Server 2016, posing a risk to system integrity and user trust.

References