What’s Vulnerable › Vulnerabilities

CVE-2010-2442

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 11.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-06-24 · updated 2026-06-16
• Weakness: CWE-264

Description

Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets."

Affected products

• Microsoft Internet Explorer 11: all versions

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=552255
• https://bugzilla.mozilla.org/show_bug.cgi?id=552255

Get alerted when CVE-2010-2442 or the next vulnerability affects your stack