CVE-2014-0322

CVE Published 2014-02-14
Related CWE(s) CWE-416: Use After Free
Related Vendor(s) microsoft
Related Product(s) internet_explorer
Exploitation Reported (CISA KEV) 2022-05-04
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References