CVE-2019-0678

CVE-2019-0678 is an elevation of privilege vulnerability in Microsoft Edge affecting Windows 10, Windows Server 2016, and Windows Server 2019. It allows an attacker to bypass cross-domain policies, enabling information access and injection between domains. With a CVSS score of 6.8 (Medium), exploitation requires user interaction (UI:R) and has high impact on confidentiality and integrity (C:H, I:H), but is complex to execute (AC:H). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.