CVE-2013-1347
High 8.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Microsoft Internet Explorer Remote Code Execution Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.
Metrics
- CVSS 3.1
-
8.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 78% (percentile: 100) as of 1 November 2026
- CWE
- CWE-416
Affected products
microsoft: internet explorer; microsoft: windows 7; microsoft: windows server 2003; microsoft: windows server 2008; microsoft: windows vista; microsoft: windows xp
References
- http://technet.microsoft.com/security/advisory/2847140 MitigationPatchVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-0… PatchVendor Advisory
- http://technet.microsoft.com/security/advisory/2847140 MitigationPatchVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-0… PatchVendor Advisory
- http://www.exploit-db.com/exploits/25294 ExploitThird Party AdvisoryVDB Entry
- http://www.exploit-db.com/exploits/25294 ExploitThird Party AdvisoryVDB Entry
- http://www.us-cert.gov/ncas/alerts/TA13-134A Third Party AdvisoryUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%… Broken Link
- http://www.us-cert.gov/ncas/alerts/TA13-134A Third Party AdvisoryUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%… Broken Link