CVE-2012-4792

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11; https://nvd.nist.gov/vuln/detail/CVE-2012-4792

Remediation deadline: August 13, 2024

Description

Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.

Timeline

Published:July 23rd, 2024 12:00 AM

Last modified:July 23rd, 2024 12:00 AM

Added to KEV:July 23rd, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Microsoft

Products

Internet Explorer

Weaknesses (CWE)

CWE-416

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute