CVE-2012-4792
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
78.8%
99.6th percentile
CISA KEV
Listed
Added 2024-07-23 · patch by 2024-08-13
Weakness / dates
—
Published — · modified —
Description
Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.