Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2017-0210

CVE-2017-0210HIGH

Microsoft Internet Explorer

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  H  H  H    8.8   .2233   97.6   YES

AFFECTED
  Product            Versions                                         Fixed
  Internet Explorer  Internet Explorer 10 and Internet Explorer 11 –  —

TIMELINE
  Sep 9   Reserved by microsoft
  Apr 12  Published (CNA: microsoft)
  May 24  Added to CISA KEV, remediation due 2022-06-14

CNA: microsoft · CVSS v3.1 · 4 references · KEV due June 14, 2022

Description

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
September 9, 2016	Reserved	Reserved by microsoft
April 12, 2017	Published	Published (CNA: microsoft)
May 24, 2022	KEV ADDED	Added to CISA KEV, remediation due 2022-06-14

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Microsoft Corporation	Internet Explorer	—	Internet Explorer 10 and Internet Explorer 11	—

References (4)

http://www.securityfocus.com/bid/97512 [vdb-entry, x_refsource_BID]
http://www.securitytracker.com/id/1038238 [vdb-entry, x_refsource_SECTRACK]
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 [x_refsource_CONFIRM]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0210 [government-resource]

Authoritative record: CVE-2017-0210 at cve.org

Vendors: microsoft

About this page