CVE-2010-0808

LOW 2.6CVE-2010-0808 · Published 13/10/2010 · updated 16/06/2026

In short

CVE-2010-0808 is a LOW (CVSS 2.6) vulnerability affecting internet explorer (microsoft).
Chance of exploitation in the next 30 days (EPSS): 9.5%, higher than 95.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6= 7`	No fix yet

Description

Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."

References

support.avaya.com/css/P8/documents/100113324
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6889

More vulnerabilities in internet explorer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free