{"id":"CVE-2017-0233","aliases":["EUVD-2017-0597","GHSA-xw5f-2w3q-6c92"],"status":"published","title":"An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to...","description":"An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka \"Microsoft Edge Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-0241.","severity":{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0308,"percentile":0.87764,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-05-12T14:00:00Z","modified":"2026-06-17T00:57:18Z","products":[{"vendor":"microsoft","product":"edge"},{"vendor":"microsoft","product":"microsoft edge"},{"vendor":"microsoft corporation","product":"microsoft edge"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0233","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98179","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0233"},{"url":"https://github.com/advisories/GHSA-xw5f-2w3q-6c92"}],"sources":{"cve":[{"id":"CVE-2017-0233","description":"An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka \"Microsoft Edge Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-0241.","status":"published","published":"2017-05-12T14:00:00Z","modified":"2024-08-05T12:55:19.131Z","updated_at":"2026-11-02T14:33:22.699876Z"}],"euvd":[{"id":"EUVD-2017-0597","description":"An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka \"Microsoft Edge Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-0241.","status":"published","published":"2017-05-12T14:00:00Z","modified":"2024-08-05T12:55:19Z","updated_at":"2026-11-03T02:39:24.815554Z"}],"ghsa":[{"id":"GHSA-xw5f-2w3q-6c92","title":"An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to...","description":"An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka \"Microsoft Edge Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-0241.","status":"published","published":"2022-05-13T01:39:50Z","modified":"2023-02-02T05:00:30Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:50:58.133799Z"}],"nvd":[{"id":"CVE-2017-0233","description":"An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka \"Microsoft Edge Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-0241.","status":"published","published":"2017-05-12T14:29:02.643Z","modified":"2026-06-17T00:57:18.957Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:47.848196Z"}]}}