CVE-2017-0065

🗓️ 17 Mar 2017 00:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 82 Views🌐 WEB

Microsoft Edge remote information disclosure via crafted website

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerability in Microsoft Edge’s browser allows a hacker to access confidential information from the process memory, cause a service failure, or have other adverse effects on the system.	31 Mar 201700:00	–	bdu_fstec
CNVD	Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-03537)	16 Mar 201700:00	–	cnvd
Check Point Advisories	Microsoft Browser Information Disclosure (MS17-007: CVE-2017-0065)	14 Mar 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-0065	17 Mar 201700:00	–	cvelist
Microsoft KB	March 14, 2017—KB4012606 (OS Build 10240.17319)	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-007: Cumulative security update for Microsoft Edge: March 14, 2017	14 Mar 201700:00	–	mskb
Microsoft KB	March 14, 2017—KB4013198 (OS Build 10586.839)	14 Mar 201707:00	–	mskb
Microsoft KB	March 14, 2017—KB4013429 (OS Build 14393.953)	14 Mar 201707:00	–	mskb
Kaspersky	KLA10967 Multiple vulnerabilities in Microsoft Browser	14 Mar 201700:00	–	kaspersky
Kaspersky	KLA10968 Multiple vulnerabilities in Microsoft Edge	14 Mar 201700:00	–	kaspersky

NVD

Node

microsoft edge

[
  {
    "product": "Edge",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Edge"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/96648
securitytracker	www.securitytracker.com/id/1038006
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0065

Parameter	Position	Path	Description	CWE
xss	request body	127.0.0.1/malicious_server.php	POC endpoint that receives exfiltrated hosts file content via POST from the exploited page.	CWE-200

13 May 2026 00:24Current

4.1Medium risk

Vulners AI Score4.1

CVSS 34.3

CVSS 24.3

EPSS0.27177

CWE-200