CVE-2010-0806

Katalog CVE

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 82,2%

Kerentanan Resource Management Errors pada microsoft internet explorer. Skor CVSS 3.1 8.8 (High) menurut CISA ADP. Masuk katalog KEV CISA pada 20 Mei 2026, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."

Rincian

Terbit di NVD

10 Maret 2010

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-399: Resource Management Errors
CWE-416: Use After Free

EPSS (30 hari)

82,2% peluang dieksploitasi; lebih tinggi dari 99,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft Internet Explorer Use-After-Free Vulnerability

Masuk KEV

20 Mei 2026

Tenggat CISA

3 Juni 2026 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://secunia.com/advisories/38860 advisory vendor
• http://www.microsoft.com/technet/security/advisory/981374.mspx broken link · patch · advisory vendor
• http://www.vupen.com/english/advisories/2010/0567 advisory vendor
• http://www.vupen.com/english/advisories/2010/0744 advisory vendor
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 advisory vendor
• https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 advisory vendor
• http://www.kb.cert.org/vuls/id/744549 patch · pemerintah AS
• http://www.us-cert.gov/cas/techalerts/TA10-068A.html pemerintah AS
• http://www.us-cert.gov/cas/techalerts/TA10-089A.html pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0806 pemerintah AS
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56772 advisory pihak ketiga · vdb entry
• http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx broken link
• http://osvdb.org/62810 broken link
• http://www.securityfocus.com/bid/38615 broken link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446 broken link