Analysis Summary
An error related to the “performance.getEntriesByType()” method can be exploited to bypass Cross-Origin Resource Sharing (CORS) restrictions and subsequently disclose otherwise restricted content.
Impact
Security Bypass
Affected Vendors
Microsoft
Affected Products
Microsoft Internet Explorer 11.x
Remediation
There is no official solution available as of yet.