CVE-2017-8754

CVE-2017-8754 is a security feature bypass vulnerability in Microsoft Edge across various Windows 10 and Server 2016 versions. It allows an attacker to trick a user into loading malicious content by exploiting how Edge's Content Security Policy validates specially crafted documents. This vulnerability has a CVSS score of 4.2 (Medium), indicating a network-based attack with high attack complexity, requiring user interaction, and potentially leading to limited confidentiality and integrity impacts. There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and it has received minimal community discussion and media coverage.