CVE-2006-3451: Microsoft Ie

High severity, CVSS 7.5. EPSS: 41.2% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Microsoft Ie: version 5.0 only; version 6 only

Published 2006-08-08. Last modified 2026-06-16.