CVE-2006-2218
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote...
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.
- Record
CVE-2006-2218- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.
- Record
CVE-2006-2218- Updated
- 2026-11-02
EUVDEUVD-2006-2219 No score
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.
- Record
EUVD-2006-2219- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-37wg-v9p2-chv7 No score
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote...
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.
- Record
GHSA-37wg-v9p2-chv7- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2218 is a high vulnerability (CVSS 9.3) in Microsoft Internet Explorer, published May 5, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 33.1%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1768
secunia.com/secunia_research/2006-41/advisory
vupen.com/english/advisories/2006/2319
securitytracker.com/id?1016291
us-cert.gov/cas/techalerts/TA06-164A.html
Show 12 moreShow less
securityfocus.com/archive/1/437099/100/0/threaded
osvdb.org/27475
kb.cert.org/vuls/id/338828
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
nvd.nist.gov/vuln/detail/CVE-2006-2218
github.com/advisories/GHSA-37wg-v9p2-chv7