CVE-2007-5158: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 15% chance of exploitation in the next 30 days.

The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to CVE-2007-3511.

Affected products

• Microsoft Internet Explorer: version 6.0 only

Published 2007-10-01. Last modified 2026-06-16.