Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and CVE-2013-3151
Published Jul 10, 2013 ·Due Apr 20, 2023
8.8
HIGHCVSS 3.1
EPSS 70.68%
Description
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and CVE-2013-3151.
Affected products
No data.
Configuration 1
- 8
Running on/with
- n/a
- n/a
- n/a
- r2
- r2
- n/a
- n/a
- n/a
Configuration 2
- 9
Running on/with
- n/a
- n/a
- r2
- n/a
Configuration 3
- 10
Running on/with
- n/a
- n/a
- n/a
- r2
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
AV:N/AC:M/Au:N/C:C/I:C/A:C
Date Added
Mar 30, 2023
Patch Due
Apr 20, 2023
Required Action
The impacted product is end-of-life and should be disconnected if still in use.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
ActiveAutomatable
NoTechnical Impact
TotalDecision
n/aAssessed Feb 10, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 4, 2026.
Score over time
2022-2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (27 key points)
Flat stretches are collapsed. Showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 4, 2026 | 70.68% (0.70676) | 99.38th | v5 (v2026.06.15) |
| Jun 15, 2026 | 70.68% (0.70676) | 99.31th | v5 (v2026.06.15) |
| Apr 14, 2026 | 84.55% (0.84554) | 99.33th | v4 (v2025.03.14) |
| Apr 5, 2026 | 82.88% (0.82881) | 99.25th | v4 (v2025.03.14) |
| Apr 4, 2026 | 84.15% (0.84153) | 99.31th | v4 (v2025.03.14) |
| Mar 10, 2026 | 82.85% (0.82854) | 99.23th | v4 (v2025.03.14) |
| Jan 4, 2026 | 85.00% (0.85003) | 99.31th | v4 (v2025.03.14) |
| Jun 28, 2025 | 88.98% (0.88984) | 99.49th | v4 (v2025.03.14) |
| Apr 24, 2025 | 85.37% (0.85365) | 99.29th | v4 (v2025.03.14) |
| Mar 17, 2025 | 83.29% (0.83294) | 99.23th | v4 (v2025.03.14) |
| Dec 17, 2024 | 93.46% (0.93461) | 99.31th | v3 (v2023.03.01) |
| Dec 12, 2024 | 95.98% (0.95979) | 99.55th | v3 (v2023.03.01) |
| Jun 29, 2024 | 95.58% (0.95579) | 99.42th | v3 (v2023.03.01) |
| May 30, 2024 | 96.14% (0.96143) | 99.50th | v3 (v2023.03.01) |
| Mar 27, 2024 | 96.39% (0.96394) | 99.53th | v3 (v2023.03.01) |
| Jan 25, 2024 | 96.29% (0.96289) | 99.43th | v3 (v2023.03.01) |
| Dec 2, 2023 | 96.19% (0.96186) | 99.37th | v3 (v2023.03.01) |
| Oct 13, 2023 | 96.45% (0.96451) | 99.42th | v3 (v2023.03.01) |
| Aug 26, 2023 | 96.35% (0.96348) | 99.35th | v3 (v2023.03.01) |
| Jul 8, 2023 | 96.06% (0.96059) | 99.23th | v3 (v2023.03.01) |
| May 22, 2023 | 96.26% (0.96262) | 99.25th | v3 (v2023.03.01) |
| May 8, 2023 | 96.88% (0.96877) | 99.50th | v3 (v2023.03.01) |
| Apr 5, 2023 | 96.92% (0.96923) | 99.51th | v3 (v2023.03.01) |
| Mar 31, 2023 | 96.94% (0.96944) | 99.52th | v3 (v2023.03.01) |
| Mar 7, 2023 | 97.13% (0.97129) | 99.60th | v3 (v2023.03.01) |
| Mar 6, 2023 | 89.14% (0.89144) | 99.81th | v2 (v2022.01.01) |
| Feb 4, 2022 | 89.14% (0.89144) | 99.78th | v2 (v2022.01.01) |
References (4)
- http://www.us-cert.gov/ncas/alerts/TA13-190A third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 vendor-advisoryx_refsource_MSPatchVendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17363 vdb-entrysignaturex_refsource_OVALBroken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3163 government-resourceUS Government Resource
| Link | Providers | Tags |
|---|---|---|
| http://www.us-cert.gov/ncas/alerts/TA13-190A | third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource | |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 | vendor-advisoryx_refsource_MSPatchVendor Advisory | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17363 | vdb-entrysignaturex_refsource_OVALBroken Link | |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3163 | government-resourceUS Government Resource |
Change history (0)
No recorded changes yet.