Variant weakness
Draft
CWE-623: Unsafe ActiveX Control Marked Safe For Scripting
An ActiveX control is intended for restricted use, but it has been marked as safe-for-scripting.
3
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
This might allow attackers to use dangerous functionality via a web page that accesses the control, which can lead to different resultant vulnerabilities, depending on the control's behavior.
Real-world CVEs
3 recorded CVEs are caused by CWE-623 (Unsafe ActiveX Control Marked Safe For Scripting). The highest-severity and most recent are shown first. 0 new CWE-623 CVEs have been recorded so far in 2026 (1 in 2025).