CVE-2001-0149: Microsoft Internet Explorer

Medium severity, CVSS 5.0. EPSS: 32.2% chance of exploitation in the next 30 days.

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.

Affected products

• Microsoft Internet Explorer: up to and including 5.5

Published 2001-06-02. Last modified 2026-06-16.