AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-1140

HIGH · CVSS 7.1 EPSS 24.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-06-10 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.1. It affects Microsoft, Windows. Its EPSS score suggests a 24.8% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2009-1140
Severity
HIGH
CVSS
7.1
EPSS
24.76%
Microsoft Windows

Original NVD Description

Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not prevent HTML rendering of cached content, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Cross-Domain Information Disclosure Vulnerability."