Microsoft Internet Explorer Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 20/05/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| internet explorer | = 5.01= 6= 7= 8 |
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free