CVE-1999-0827: Microsoft Ie

Low severity, CVSS 2.6. EPSS: 4.8% chance of exploitation in the next 30 days.

By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.

Affected products

  • Microsoft Ie: version 4.0 only
  • Microsoft Internet Explorer: version 3.0 only; version 3.0.2 only; version 3.1 only; version 3.2 only; version 4.0 only; version 4.0.1 only; …
  • Netscape Navigator: up to and including 4.5

Published 1999-11-01. Last modified 2026-06-16.