Exploited Vulnerabilities Daily
🌐 English

Home › Microsoft

CVE-2013-3897: Microsoft Internet Explorer

EPSS77.3%No. 653 of 1739 in KEV
CVE year2013~9 yrs before listing
Same vendor in KEV389
Same product36
FieldValue
VendorMicrosoft
ProductInternet Explorer
NameMicrosoft Internet Explorer Use-After-Free Vulnerability
Added to KEV2022-03-03
US federal due date2022-03-24
Ransomware useUnknown
CWECWE-399

CISA description

A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2010-0806Microsoft Internet Explorer2026-05-2082.2%Unknown
CVE-2010-0249Microsoft Internet Explorer2026-05-2091.9%Unknown
CVE-2010-3962Microsoft Internet Explorer2025-10-0696.8%Unknown
CVE-2013-3893Microsoft Internet Explorer2025-08-1287.5%Unknown
CVE-2012-4792Microsoft Internet Explorer2024-07-2378.8%Unknown
CVE-2013-3163Microsoft Internet Explorer2023-03-3070.6%Unknown
CVE-2012-4969Microsoft Internet Explorer2022-06-0880.2%Unknown
CVE-2015-2425Microsoft Internet Explorer2022-05-2544.7%Unknown
CVE-2015-0071Microsoft Internet Explorer2022-05-2533.5%Unknown
CVE-2014-4123Microsoft Internet Explorer2022-05-2547.1%Unknown
CVE-2014-2817Microsoft Internet Explorer2022-05-2526.3%Unknown
CVE-2013-7331Microsoft Internet Explorer2022-05-2550.2%Unknown
CVE-2017-0210Microsoft Internet Explorer2022-05-2422.3%Unknown
CVE-2017-0149Microsoft Internet Explorer2022-05-2429.1%Unknown
CVE-2016-3298Microsoft Internet Explorer2022-05-2433.3%Unknown

NVD — CVE-2013-3897

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Microsoft Internet Explorer vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-03.