CVE-2024-0605

Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions within the user's loaded webpage. This vulnerability affec...

CVE-2001-1539

CVE-2001-1539 describes a stack consumption vulnerability in Internet Explorer involving the JavaScript setTimeout function. It allows remote attackers to cause a denial of service (crash) via setTimeout. The CVE notes that the vendor could not reproduce the problem. Connected records (CVE and NV...