CWE-618: Exposed Unsafe ActiveX Method
An ActiveX control is intended for use in a web browser, but it exposes dangerous methods that perform actions that are outside of the browser's security model (e.g. the zone or domain).
A kind of CWE-749 Exposed Dangerous Method or Function.
From the CWE List. © The MITRE Corporation.
Newest
- eclipse foundation openj9 jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader) 6.8 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 more GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability 6.0 Medium