CVE-2010-0494
CVSS Score Not Available
50.18%
MEDIUM RiskEPSS (98th percentile)
Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted HTML document in a situation where the client user drags one browser window across another browser window, aka "HTML Element Cross-Domain Vulnerability."
Published: 3/31/2010
Modified: 4/11/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
50.18%MEDIUM Exploitation Risk
98th percentile
This vulnerability has a 50.18% probability of being exploited in the next 30 days, ranking higher than 98% of all scored CVEs.