CVE-2016-0125
Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."
Date published : 2016-03-09
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-024