Microsoft Internet Explorer Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 23/07/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| internet explorer | = 6= 7= 8 |
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free