CVE-2009-2668: Microsoft Internet Explorer

High severity, CVSS 7.8. EPSS: 14.5% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service (CPU consumption) via an XML document composed of a long series of start-tags with no corresponding end-tags, a related issue to CVE-2009-1232.

Affected products

• Microsoft Internet Explorer: version 6 only; version 7 only

Published 2009-08-05. Last modified 2026-06-16.