CVE-2010-0806 Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving acce...
HighCVSS 9.3
EPSS 82.1%
CISA KEV
added 2026-05-20 · due 2026-06-03
Exploited in the wild
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
CISA Known Exploited Vulnerability
- Date added
- 2026-05-20
- Due date (FCEB)
- 2026-06-03
- Ransomware use
- Unknown
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5.01 | No fix listed |
| Microsoft internet explorer | = 6-sp1 | No fix listed |
| Microsoft internet explorer | = 8 | No fix listed |
| Microsoft internet explorer | = 7 | No fix listed |
| Microsoft internet explorer | = 6 | No fix listed |
References
- blogs.technet.com broken-link
- 62810 broken-link vdb-entry
- 38860 third-party-advisory vendor-advisory
- VU#744549 patch third-party-advisory us-government-resource
- www.microsoft.com broken-link patch vendor-advisory
- 38615 broken-link vdb-entry
- TA10-068A third-party-advisory us-government-resource
- TA10-089A third-party-advisory us-government-resource
- ADV-2010-0567 vdb-entry vendor-advisory
- ADV-2010-0744 vdb-entry vendor-advisory
- MS10-018 vendor-advisory
- ms-ie-useafterfree-code-execution(56772) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:8446 broken-link signature vdb-entry
- learn.microsoft.com vendor-advisory
- www.cisa.gov government-resource us-government-resource