CVE-2009-3267: Microsoft Internet Explorer

Medium severity, CVSS 5.0. EPSS: 15.9% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828.

Affected products

• Microsoft Internet Explorer: from 6.0, up to and including 6.00.2900.2180; from 7.0, up to and including 7.0.6000.16711

Published 2009-09-18. Last modified 2026-06-16.