CVE-2017-0210

mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.223 · 98 %ileEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV

Likely / severe?

22.3% (98th) EPSS

CVSS 4.3 · medium

Is it mine?

5 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

added 2022-05-24remediate by 2022-06-14

required action Apply updates per vendor instructions.

EPSS · scored 2026-10-27

Microsoft Internet Explorer Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–8.8

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondaryexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-264US

affected products (5)

Products and version ranges known to be affected.

Microsoft Corporation Internet Explorer≤ Internet Explorer 10 and Internet Explorer 11enisa_euvdEU
Microsoft Corp Internet Explorer≤ 11fstec_bduRU
Microsoft Corp Internet Explorer≤ 10fstec_bduRU
microsoft internet explorer= 10nvdUScpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*
microsoft internet explorer= 11nvdUScpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2017-04-12modified 2026-06-17

references (10)

External citations — patches, advisories, analysis.

http://www.securitytracker.com/id/1038238 cnnvd
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 cnnvd
https://www.securityfocus.com/bid/97512 cnnvd
http://www.securityfocus.com/bid/97512 enisa_euvd
http://www.securitytracker.com/id/1038238 enisa_euvd
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210 enisa_euvd
http://www.securityfocus.com/bid/97512Broken LinkThird Party AdvisoryVDB Entrynvd
http://www.securitytracker.com/id/1038238Broken LinkThird Party AdvisoryVDB Entrynvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan