CVE-2019-0678 PoC — Microsoft Edge 权限许可和访问控制漏洞

Description

Microsoft Edge Elevation of Privilege Vulnerability

介绍

## Vulnerability

Microsoft Edge Elevation of Privilege Vulnerability

## Vulnerability Description 

This vulnerability allows an attacker to execute javascript code on every host without the permission, also an attacker can steal local system files, and this also results in changing internal developer settings in Microsoft Edge. 

## CVE-ID

CVE-2019-0678

## Vendor

Microsoft

## Product

Microsoft Edge

## Disclosure Timeline

1. 28 November 2018 reported to the vendor 
2. 03 December 2019 coordinated public release of advisory

## Credits

Nikhil Mittal

文件快照

备注