Exploited vulnerability · CISA KEV
Yes. CVE-2012-4792, Microsoft Internet Explorer Use-After-Free Vulnerability, is being exploited in the wild. CISA added it to its Known Exploited Vulnerabilities catalog on 23 Jul 2024, 4223 days after it was published. It affects Microsoft Internet Explorer. If you run it, CISA's required action is: The impacted product is end-of-life and should be disconnected if still in use.
Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.
| Vendor | Microsoft (391 exploited CVEs in KEV) |
| Product | Internet Explorer |
| Vulnerability | Microsoft Internet Explorer Use-After-Free Vulnerability |
| Weakness | CWE-416 |
| Published | 30 Dec 2012 |
| Added to KEV | 23 Jul 2024 |
| Reported by (CNA) | microsoft |
Yes. CISA added CVE-2012-4792 to the Known Exploited Vulnerabilities catalog on 23 Jul 2024, which means there is reliable evidence of exploitation in the wild.
CISA does not list known ransomware use for it. That can change, and exploitation alone is reason to fix it first.
The impacted product is end-of-life and should be disconnected if still in use. Check Microsoft's advisory for the fixed versions, and if you can't patch quickly, restrict access to the affected Internet Explorer and watch it for signs of compromise.
Sources: CISA KEV (exploitation, ransomware use, required action, due date), the CVE record (publication date, CVSS, CNA), NVD and FIRST EPSS (live score). More: all KEV additions in July 2024 · Microsoft scorecard · act-now radar.
We check exposure across your estate, patch or mitigate with your team, and set up detection for what attackers do after exploiting it.
Get in touch →