---
id: "CVE-2010-0806"
kind: "vulnerability"
aliases: ["CVE-2010-0806"]
title: "Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6\u2026"
severity: "critical"
cvss: 9.3
epss: null
exploited: true
status: "open"
category: "other"
products: [{"name": "Microsoft Internet Explorer", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft internet explorer", "fixed": [], "affected": "= 5.01", "ecosystem": "vendor"}, {"name": "microsoft internet explorer", "fixed": [], "affected": "= 6", "ecosystem": "vendor"}, {"name": "microsoft internet explorer", "fixed": [], "affected": "= 8", "ecosystem": "vendor"}, {"name": "microsoft internet explorer", "fixed": [], "affected": "= 7", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "internet-explorer", "other", "windows"]
not_affected_if: ["no-ie-installed"]
published_at: "2010-03-10T22:30:01+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T23:44:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0806", "first_seen_at": "2026-10-23T23:44:51+00:00"}]
---

# Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6…

Internet Explorer has a use-after-free bug: it can access a pointer to an object after that object was deleted. A remote attacker who gets a user to load a crafted page can run arbitrary code in the browser's context.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Internet Explorer affected ? fixed ?
- vendor:microsoft internet explorer affected = 5.01 fixed ?
- vendor:microsoft internet explorer affected = 6 fixed ?
- vendor:microsoft internet explorer affected = 8 fixed ?
- vendor:microsoft internet explorer affected = 7 fixed ?

## How to check

Check the installed Internet Explorer version (e.g. Get-Item 'C:\Program Files\Internet Explorer\iexplore.exe' | Select-Object VersionInfo) and whether it is an end-of-life version.

## Fix

Discontinue use of Internet Explorer and move users to a supported browser; CISA says to apply vendor mitigations or discontinue use if none are available.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0806
- 2026-10-23T23:44:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2010-0806

## From the sources

Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_