CWE Code: 74
Vulnerability Type: privilege_escalation
CVSS Score: 5.8
CWE Name:  Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary: microsoft internet explorer 11 on windows 10, 1511, and 1606 and windows server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "internet explorer elevation of privilege vulnerability."
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2017-03-17
Last Modified Date: 2017-07-12