This security bulletin contains one low risk vulnerability.
Exploit availability: NoDescription
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists in the way that Microsoft Edge handles cross-origin requests. A remote attacker can create a specially crafted web page, trick the victim into visiting it and determine origin of all opened web pages in the browser.
Install updates from vendor's website.Vulnerable software versions
Microsoft Edge: All versionsCPE2.3
Q & A
Can this vulnerability be exploited remotely?
How the attacker can exploit this vulnerability?
Is there known malware, which exploits this vulnerability?