CVE-2007-3481

no score yetEPSS 16%

microsoft internet explorer: no CVSS score yet. EPSS 16% chance of exploitation in the next 30 days.

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute. NOTE: this issue has been disputed by other researchers, citing a variable scoping issue and information about the semantics of document.domain

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2007-06-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:internet_explorer

References

http://osvdb.org/38953
http://www.0x000000.com/?i=371
http://www.securityfocus.com/bid/24704
http://osvdb.org/38953
http://www.0x000000.com/?i=371

Check your stack JSON