Live › vulnerability › CVE-2012-4792
Go to dashboardMicrosoft Internet Explorer has a use-after-free bug that lets a crafted web page run code on the visitor's machine. It is listed in CISA's Known Exploited Vulnerabilities catalog, so attacks have been seen in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Internet Explorer | vendor | – | – |
| microsoft internet explorer | vendor | = 6 | – |
| microsoft internet explorer | vendor | = 7 | – |
| microsoft internet explorer | vendor | = 8 | – |
Check whether any machine still runs Internet Explorer, for example with reg query "HKLM\SOFTWARE\Microsoft\Internet Explorer" /v svcVersion on Windows.
Remove or disconnect Internet Explorer from use, as CISA requires for this end-of-life product.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.
CISA required action: The impacted product is end-of-life and should be disconnected if still in use.
This page as .md · .json · in your agent: get_signal("CVE-2012-4792")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.