Microsoft Internet Explorer Remote Code Execution Vulnerability

[ Why it matters ]Priority signals

• Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-03
• EPSS: 78% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.

CISA: This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 24 Mar 2022): Apply updates per vendor instructions.

• Patch on technet.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
• Patch on docs.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References

• technet.microsoft.com/security/advisory/2847140MitigationPatchVendor Advisory
• www.exploit-db.com/exploits/25294ExploitThird Party AdvisoryVDB Entry
• www.us-cert.gov/ncas/alerts/TA13-134AThird Party AdvisoryUS Government Resource
• docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-038PatchVendor Advisory
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16727Broken Link
• www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource