CVE-2016-3198
Microsoft Edge allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted document, aka "Microsoft Edge Security Feature Bypass."
Date published : 2016-06-15
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068