CVE-2010-0652: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 4.9% chance of exploitation in the next 30 days.

Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.

Affected products

• Microsoft Internet Explorer: any version

Published 2010-02-18. Last modified 2026-06-16.