The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."
http://www.securitytracker.com/id/1037444
http://www.securityfocus.com/bid/94723
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-145
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-144
Source: Mitre, NVD
Published: 2016-12-20
Updated: 2025-04-12
Base Score: 2.6
Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:P/A:N
Severity: Low
Base Score: 5.3
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Severity: Medium
EPSS: 0.34492