CVE-2006-0057

no score yetEPSS 20%

microsoft: no CVSS score yet. EPSS 20% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, which can expose the browser to attacks that would otherwise be prevented by the Kill bit setting. NOTE: CERT/CC claims that MS05-054 fixes this issue, but it is not described in MS05-054.

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2006-01-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:ie
microsoft:internet_explorer

References

http://www.kb.cert.org/vuls/id/998297
http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx
http://www.osvdb.org/23657
http://www.securityfocus.com/bid/16409
https://exchange.xforce.ibmcloud.com/vulnerabilities/24379

Check your stack JSON