CVE-2013-3893
High 8.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Microsoft Internet Explorer Resource Management Errors Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.
Metrics
- CVSS 3.1
-
8.8 (HIGH)
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 88% (percentile: 100) as of 1 November 2026
- CWE
- CWE-416
Affected products
microsoft: internet explorer
References
- http://blogs.technet.com/b/srd/archive/2013/10/08/ms13-080-addresses-two-vulner… Vendor Advisory
- http://technet.microsoft.com/security/advisory/2887505 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-0… Vendor Advisory
- http://blogs.technet.com/b/srd/archive/2013/10/08/ms13-080-addresses-two-vulner… Vendor Advisory
- http://technet.microsoft.com/security/advisory/2887505 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-0… Vendor Advisory
- http://blogs.technet.com/b/srd/archive/2013/09/17/cve-2013-3893-fix-it-workarou… Exploit
- http://packetstormsecurity.com/files/162585/Microsoft-Internet-Explorer-8-SetMo… Exploit
- http://pastebin.com/raw.php?i=Hx1L5gu6 Exploit
- http://blogs.technet.com/b/srd/archive/2013/09/17/cve-2013-3893-fix-it-workarou… Exploit