Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-8723

18
FAUCET Score

CVE-2017-8723 describes a security feature bypass vulnerability in Microsoft Edge across various Windows 10 and Server 2016 versions. This flaw allows an attacker to trick a user into loading malicious content by exploiting how Edge's Content Security Policy (CSP) validates specially crafted documents. Rated Medium (CVSS 4.3), it requires user interaction (UI:R) and could lead to a low impact on integrity (I:L), but does not affect confidentiality or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has received some community and media attention.

Impacted Technologies

VendorProductVersion(s)CPE
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

4.3MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
1.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
4.31%
Probability of exploitation in next 30 days
EPSS Percentile
90.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0431 is in the 96th percentile among its peer group of 26,234 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (19)

microsoftpatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 10724-10816
View patch
microsoftpatch availablevia msrc
Product: 10724-10951
View patch
microsoftpatch availablevia msrc
Product: 10724-10952
View patch
microsoftpatch availablevia msrc
Product: 10724-10729
View patch
microsoftpatch availablevia msrc
Product: 10724-10735
View patch
microsoftpatch availablevia msrc
Product: 10724-10789
View patch
microsoftpatch availablevia msrc
Product: 10724-10788
View patch
microsoftpatch availablevia msrc
Product: 10724-10852
View patch
microsoftpatch availablevia msrc
Product: 10724-10853
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows Server 2016
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
View patch

Vendor Advisories (1)

microsoft2017-Sep/CVE-2017-8723Low

Microsoft Edge Security Feature Bypass Vulnerability

Sep 12, 2017

References

portal.msrc.microsoft.com / en-US/security-guidance/advisory/CVE-2017-8723
PatchVendor Advisory
securityfocus.com / bid/100768
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039326
Third Party AdvisoryVDB Entry