---
id: "CVE-2013-3897"
kind: "vulnerability"
aliases: ["CVE-2013-3897"]
title: "Microsoft Internet Explorer: Microsoft Internet Explorer Use-After-Free Vulnerability"
severity: "critical"
cvss: 9.3
epss: 0.7731
exploited: true
status: "open"
category: "other"
products: [{"name": "Microsoft Internet Explorer", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "internet-explorer", "other", "windows"]
not_affected_if: ["ie-removed", "no-ie-installed"]
published_at: "2013-10-09T14:54:25+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3897", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-3897", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3897", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Microsoft Internet Explorer: Microsoft Internet Explorer Use-After-Free Vulnerability

A use-after-free bug in Internet Explorer's CDisplayPointer component lets a remote attacker run arbitrary code. It is listed as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Internet Explorer affected ? fixed ?

## How to check

Check whether Internet Explorer is installed and which version: run 'reg query "HKLM\SOFTWARE\Microsoft\Internet Explorer" /v svcVersion' on Windows. Note: the sources do not give a check command, so this is a general check.

## Fix

Apply Microsoft's security update for Internet Explorer per vendor instructions, as CISA requires. Sources do not name the specific KB or fixed version.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3897
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2013-3897
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2013-3897

## From the sources

Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploited in the wild in September and October 2013, aka "Internet Explorer Memory Corruption Vulnerability."

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_