Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
CISA KEV·Added 2024-07-23 — agencies required to remediate by 2024-08-13

CVE-2012-4792

HIGH

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that…

Published
Dec 30, 2012
Updated
Apr 22, 2026
Affected
0 pkgs
Patched
None yet
Exploits
4 known

EPSS Exploitation Probability

via FIRST.org ↗
91.2%probability of exploitation in next 30 days
Very High Risk100th percentile0.00%
90.7%91.3%91.8%92.3%91.5%91.2%Dec 25Apr 26Jun 26

EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.

Description

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.

Affected Products

1 product · 3 configurations
Application
internet explorermicrosoft
3 versions
678
Exploits & PoCs
4

Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.

EDB-23754remotewindows✓ Verified

Microsoft Internet Explorer - CDwnBindInfo Object Use-After-Free (Metasploit)

by Metasploit · Dec 31, 2012

EDB-23785remotewindows✓ Verified

Microsoft Internet Explorer - CButton Object Use-After-Free (Metasploit)

by Metasploit · Jan 2, 2013

Frequently Asked Questions

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
O3 Security · Impact-Aware SCA

Is CVE-2012-4792 in your stack?

O3 detects CVE-2012-4792 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.