CVE-2006-4888

VendormicrosoftProductieDiscoveredSep 19, 2006UpdatedApr 16, 2026

Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT.

View graph Watch Export

CVSS v3.1

—

EPSS

17.0%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Aug 18, 2026

▲ 0.42pp

16.6% → 17.0% over 2 tracked changes

Connections

1 relationships

source

Timeline

disclosure → media coverage

Sep 19, 2006

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026