CVE-2006-4092: Simpliciti Locked Browser

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows local users to perform unauthorized actions by visiting a web site that executes a JavaScript window.blur loop to remove focus from the browser window, then pressing CTRL-SHIFT-ESC to invoke the Task Manager.

Affected products

Published 2006-08-11. Last modified 2026-06-16.