VULNERABILITY INTELLIGENCE

CVE-2010-1258

CVSS score4.3 MEDIUM
EPSS probability16.99%
CISA KEVNot currently listed
Published2010-08-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references