Microsoft Edge Security Feature Bypass Vulnerability

<p>A security feature bypass vulnerability exists in Microsoft Edge when the Edge <a href="https://technet.microsoft.com/en-us/library/security/dn848375.aspx#CSP">Content Security Policy (CSP)</a> fails to properly validate certain specially crafted documents. An attacker who exploited the bypass could trick a user into loading a page containing malicious content.</p> <p>To exploit the bypass, an attacker must trick a user into either loading a page containing malicious content or visiting a malicious website. The attacker could also inject the malicious page into either a compromised website or an advertisement network.</p> <p>The security update addresses the bypass by correcting how the Edge CSP validates documents.</p>

Where it's fixed