CVE-2010-2442: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 11.6% chance of exploitation in the next 30 days.

Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets."

Affected products

• Microsoft Internet Explorer: any version

Published 2010-06-24. Last modified 2026-06-16.