CVE-2011-0038: Microsoft Internet Explorer

High severity, CVSS 9.3. EPSS: 11.2% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a Trojan horse IEShims.dll in the current working directory, as demonstrated by a Desktop directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."

Affected products

• Microsoft Internet Explorer: version 8 only

Published 2011-02-10. Last modified 2026-06-16.