CVE-2001-0338: Microsoft Internet Explorer

Medium severity, CVSS 5.1. EPSS: 5.3% chance of exploitation in the next 30 days.

Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."

Affected products

• Microsoft Internet Explorer: up to and including 5.5; version 5.01 only

Published 2001-06-27. Last modified 2026-06-16.