8.8
Élevée
CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
The impacted product is end-of-life and should be disconnected if still in use.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-416
Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
Produits et versions touchés
Autres CVE de n/a
Les 144658 CVE de n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Non notée
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Non notée
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Non notée
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Non notée