In CISA KEV8.8 High
CVE-2010-0806
Microsoft Internet Explorer Use-After-Free Vulnerability
MicrosoftInternet Explorer
Status
- Exploited in the wild
- In CISA KEV since 20 May
- Vendor fix available
Federal deadlineWed 3 Jun, 23:59 UTC
Passed 143 days ago
CISA KEV · added 20 May
Exploit probabilityEPSSchecked 25 Oct
82%probability of exploitation in the next 30 days
Higher than 100% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 4 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 20 May · 18:02 UTC | CISA | CISA adds seven KEV flaws, including 2026 Microsoft Defender bugs |
| Wed 20 May · 19:37 UTC | CISA | CISA adds CVE-2010-0806 to KEV after IE exploits observed in wild |
| Wed 20 May · 20:13 UTC | CISA | CISA's KEV Catalog Helps Firms Prioritise Active Exploit Patches |
| Thu 21 May · 21:32 UTC | Security Affairs | CISA Adds Critical Flaws in Windows, Office, Defender to KEV List |
- CISA Adds Critical Flaws in Windows, Office, Defender to KEV ListSecurity Affairs · mentions it in passing
- CISA's KEV Catalog Helps Firms Prioritise Active Exploit PatchesCISA · official notice
- CISA adds CVE-2010-0806 to KEV after IE exploits observed in wildCISA · official notice
- CISA adds seven KEV flaws, including 2026 Microsoft Defender bugsCISA · first in our coverage · official notice · mentions it in passing