Exploited Vulnerabilities Daily
🌐 English

Home › Microsoft

CVE-2010-0249: Microsoft Internet Explorer

EPSS91.9%No. 431 of 1739 in KEV
CVE year2010~16 yrs before listing
Same vendor in KEV389
Same product36
FieldValue
VendorMicrosoft
ProductInternet Explorer
NameMicrosoft Internet Explorer Use-After-Free Vulnerability
Added to KEV2026-05-20
US federal due date2026-06-03
Ransomware useUnknown
CWECWE-416

CISA description

Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2010-0806Microsoft Internet Explorer2026-05-2082.2%Unknown
CVE-2010-3962Microsoft Internet Explorer2025-10-0696.8%Unknown
CVE-2013-3893Microsoft Internet Explorer2025-08-1287.5%Unknown
CVE-2012-4792Microsoft Internet Explorer2024-07-2378.8%Unknown
CVE-2013-3163Microsoft Internet Explorer2023-03-3070.6%Unknown
CVE-2012-4969Microsoft Internet Explorer2022-06-0880.2%Unknown
CVE-2015-2425Microsoft Internet Explorer2022-05-2544.7%Unknown
CVE-2015-0071Microsoft Internet Explorer2022-05-2533.5%Unknown
CVE-2014-4123Microsoft Internet Explorer2022-05-2547.1%Unknown
CVE-2014-2817Microsoft Internet Explorer2022-05-2526.3%Unknown
CVE-2013-7331Microsoft Internet Explorer2022-05-2550.2%Unknown
CVE-2017-0210Microsoft Internet Explorer2022-05-2422.3%Unknown
CVE-2017-0149Microsoft Internet Explorer2022-05-2429.1%Unknown
CVE-2016-3298Microsoft Internet Explorer2022-05-2433.3%Unknown
CVE-2016-0162Microsoft Internet Explorer2022-05-2422.0%Unknown

NVD — CVE-2010-0249

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Microsoft Internet Explorer vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2026-05-20.