VULNERABILITY INTELLIGENCE
CVE-2013-1347
CVSS score8.8 HIGH
EPSS probability77.74%
CISA KEVKnown exploited vulnerability
Published2013-05-05
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Microsoft Internet Explorer Remote Code Execution Vulnerability
Vendor / product: Microsoft / Internet Explorer
Description
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.
Weakness classification
- CWE-416: Use After Free
Primary references
- secure@microsoft.com — Mitigation, Patch, Vendor Advisory
- secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource