CVE-2006-5745
7.6
CVSS v2.0 Base Score
86.31%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.
Published: 11/6/2006
Modified: 4/23/2026
Vulnerability Summary
CVSS v2 Score
7.6
AV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS Score (Exploitation Probability)
86.31%HIGH Exploitation Risk
99th percentile
This vulnerability has a 86.31% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other