CVE-2017-8504

Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8498.

• CWE-200

• http://www.securityfocus.com/bid/98892Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8504Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98892Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8504Patch, Vendor Advisory

Published

Jun 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8497Microsoft Edge in Windows 10 1607 and Windows Server 2016 al…
• CVE-2017-8498Microsoft Edge in Windows 10 1607 and 1703, and Windows Serv…
• CVE-2017-8499Microsoft Edge in Windows 10 1703 allows an attacker to exec…
• CVE-2017-8501Microsoft Office allows a remote code execution vulnerabilit…
• CVE-2017-8502Microsoft Office allows a remote code execution vulnerabilit…
• CVE-2017-8503Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and…
• CVE-2017-8506A remote code execution vulnerability exists in Microsoft Of…
• CVE-2017-8507A remote code execution vulnerability exists in the way Micr…
• CVE-2017-8508A security feature bypass vulnerability exists in Microsoft …
• CVE-2017-8509A remote code execution vulnerability exists in Microsoft Of…
• CVE-2017-8510A remote code execution vulnerability exists in Microsoft Of…
• CVE-2017-8511A remote code execution vulnerability exists in Microsoft Of…