CVE-1999-1446: Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the T...

Security readout for executives and security teams

This is an old privacy weakness in Internet Explorer 3. The browser stores visited URLs in DAT files under Temporary Internet Files and History, and Clear History does not remove them. The business risk is residual browsing history on legacy systems, not a modern remote-code-execution scenario. Exposure is likely limited to obsolete systems still using Internet Explorer 3 or preserving old user profiles from that era. Modern environments are unlikely to be affected unless legacy images, forensic archives, or unsupported desktops remain in scope. Low priority for most organizations because this targets a decades-old browser. Escalate only if legacy Internet Explorer 3 systems, old desktop images, or sensitive historical user profiles are still retained or processed. Mitigation focus: Confirm whether Internet Explorer 3 exists anywhere in managed or archived environments.; Retire or isolate systems that still depend on Internet Explorer 3.; Treat retained DAT history files as sensitive user data during disposal or forensics..

Prepared

Jul 1, 2026, 08:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.