What’s Vulnerable › Vulnerabilities

CVE-1999-1241

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 14.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-09-12 · updated 2026-06-16

Description

Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.

Affected products

• Microsoft Internet Explorer 11: 6.0.2900

References

• http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2173
• http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2173

Get alerted when CVE-1999-1241 or the next vulnerability affects your stack