CVE-2010-0255

CVE-2010-0255 is a vulnerability in Microsoft Internet Explorer versions 5.01 SP4 through 8 that allows remote attackers to bypass access restrictions and read arbitrary local files. This is achieved by rendering non-HTML local files as HTML documents, typically through JavaScript exploit code referencing a file://127.0.0.1 URL. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and primarily impacting confidentiality. While the EPSS score suggests a higher-than-average exploitability probability, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.