CVE-2010-1258: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 17% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."

Affected products

• Microsoft Internet Explorer: version 6 only; version 7 only; version 8 only

Published 2010-08-11. Last modified 2026-06-16.