AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2011-0096

MEDIUM · CVSS 6.1 EPSS 46.82% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-01-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2011-0096
Severity
MEDIUM
CVSS
6.1
EPSS
46.82%
Microsoft Windows

Original NVD Description

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."