Live › vulnerability › CVE-2014-0322
Go to dashboardMicrosoft Internet Explorer has a use-after-free memory bug that lets a remote attacker run code. CISA lists it as exploited in the wild, and the EPSS exploitation probability is 0.851.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Internet Explorer | vendor | – | – |
Unknown from the sources.
Apply updates per vendor instructions; the sources do not name the patched version or KB.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.
This page as .md · .json · in your agent: get_signal("CVE-2014-0322")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.