https://pwn.watch/t/internet-explorer Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 23 Jul 2024 00:00:00 GMT https://pwn.watch/i/microsoft-internet-explorer-cve-2012-4792 https://pwn.watch/i/microsoft-internet-explorer-cve-2012-4792 Tue, 23 Jul 2024 00:00:00 GMT high <p>Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object. Added to the CISA KEV catalog on 2024-07-23. CVE-2012-4792 was assigned before 2024; the KEV listing came in 2024.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> unpatched · <strong>Fixed in:</strong> No fix: CISA says the product is end-of-life and should be retired</p> <p><strong>Latest updates:</strong></p><ul><li>2024-07-23: CISA added CVE-2012-4792 to the KEV catalog (federal deadline 2024-08-13) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2012-4792</p>