CVE-1999-1241: Microsoft Internet Explorer

High severity, CVSS 10.0. EPSS: 14.4% chance of exploitation in the next 30 days.

Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.

Affected products

• Microsoft Internet Explorer: version 6.0.2900 only

Published 1999-05-06. Last modified 2026-06-16.