CVE-2010-3962

8.1 highKEVEPSS 97%

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 97% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2025-10-06, due 2025-10-27
CWE: CWE-416
Published: 2010-11-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:internet_explorer

References

http://blogs.technet.com/b/msrc/archive/2010/11/02/microsoft-releases-security-advisory-2458511.aspx
http://secunia.com/advisories/42091
http://www.exploit-db.com/exploits/15418
http://www.exploit-db.com/exploits/15421
http://www.kb.cert.org/vuls/id/899748

Check your stack JSON