CVE-2005-2274: Microsoft Internet Explorer

Low severity, CVSS 2.6. EPSS: 9.6% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

Affected products

• Microsoft Internet Explorer: version 6.0 only

Published 2005-07-13. Last modified 2026-06-16.