cve.bz

CWE-618: Exposed Unsafe ActiveX Method

Filter

An ActiveX control is intended for use in a web browser, but it exposes dangerous methods that perform actions that are outside of the browser's security model (e.g. the zone or domain).

What the weakness is: CWE-618 at MITRE. All weaknesses

Ask an AI about CWE-618

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-618: Exposed Unsafe ActiveX Method and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/618.html and https://cve.bz/cve/cwe/618?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.8CVE-2026-97400EPSS 0.2%

    In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents…

  2. 6.0CVE-2025-0118EPSS 0.5%

    A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitim…