Exploited Vulnerabilities Daily
🌐 English

Home › Microsoft

CVE-2012-4792: Microsoft Internet Explorer

EPSS78.8%No. 633 of 1739 in KEV
CVE year2012~12 yrs before listing
Same vendor in KEV389
Same product36
FieldValue
VendorMicrosoft
ProductInternet Explorer
NameMicrosoft Internet Explorer Use-After-Free Vulnerability
Added to KEV2024-07-23
US federal due date2024-08-13
Ransomware useUnknown
CWECWE-416

CISA description

Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2010-0806Microsoft Internet Explorer2026-05-2082.2%Unknown
CVE-2010-0249Microsoft Internet Explorer2026-05-2091.9%Unknown
CVE-2010-3962Microsoft Internet Explorer2025-10-0696.8%Unknown
CVE-2013-3893Microsoft Internet Explorer2025-08-1287.5%Unknown
CVE-2013-3163Microsoft Internet Explorer2023-03-3070.6%Unknown
CVE-2012-4969Microsoft Internet Explorer2022-06-0880.2%Unknown
CVE-2015-2425Microsoft Internet Explorer2022-05-2544.7%Unknown
CVE-2015-0071Microsoft Internet Explorer2022-05-2533.5%Unknown
CVE-2014-4123Microsoft Internet Explorer2022-05-2547.1%Unknown
CVE-2014-2817Microsoft Internet Explorer2022-05-2526.3%Unknown
CVE-2013-7331Microsoft Internet Explorer2022-05-2550.2%Unknown
CVE-2017-0210Microsoft Internet Explorer2022-05-2422.3%Unknown
CVE-2017-0149Microsoft Internet Explorer2022-05-2429.1%Unknown
CVE-2016-3298Microsoft Internet Explorer2022-05-2433.3%Unknown
CVE-2016-0162Microsoft Internet Explorer2022-05-2422.0%Unknown

NVD — CVE-2012-4792

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Microsoft Internet Explorer vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-07-23.