VULNERABILITY INTELLIGENCE

CVE-2007-3027

CVSS score9.3 HIGH
EPSS probability34.90%
CISA KEVNot currently listed
Published2007-06-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability."

Primary references