Security Bypass in Microsoft Internet Explorer 8 and Other Versions
CVE-2009-2064

Currently unrated

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
15 June 2009

What is CVE-2009-2064?

A vulnerability exists in Microsoft Internet Explorer 8, where the browser only detects HTTP content in HTTPS web pages when the top-level frame is secured via HTTPS. This flaw can be exploited by man-in-the-middle attackers who can manipulate an HTTP page to add an HTTPS iframe that references an external script file hosted on an HTTP site. This can lead to the execution of arbitrary web scripts in the context of HTTPS sites, compromising user data and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

EPSS Score

18% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.