CVE-2002-0026
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing...
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.
- Record
CVE-2002-0026- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.
- Record
CVE-2002-0026- Updated
- 2026-11-02
EUVDEUVD-2002-0026 No score
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.
- Record
EUVD-2002-0026- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rh9j-9vx5-j63x No score
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing...
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.
- Record
GHSA-rh9j-9vx5-j63x- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0026 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published March 8, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.3%, the 96th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A32
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
securityfocus.com/bid/4082
nvd.nist.gov/vuln/detail/CVE-2002-0026
github.com/advisories/GHSA-rh9j-9vx5-j63x