CVE Watch—

CVE-2010-0806

Microsoft Internet Explorer Use-After-Free Vulnerability

CVSS

—

No CVSS

EPSS

82.2%

p100

KEV

YES

May 20, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

82.2%EPSS · 30 days82.2%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Internet Explorer

Vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

Added to KEV

May 20, 2026

Remediate by

Jun 3, 2026

Known ransomware use

Summary description

Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374 ; https://nvd.nist.gov/vuln/detail/CVE-2010-0806

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2021-270858.8 HIG

92.6%

KEV—78Microsoft Internet Explorer Remote Code Execution Vulnerability58d CVE-2021-264118.8 HIG

99.6%

KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability14d CVE-2019-07527.5 HIG

99.6%

KEV—80Microsoft Internet Explorer Type Confusion Vulnerability65d CVE-2010-3962—

99.9%

KEV—80Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability—CVE-2010-0249—

99.8%

KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2016-0189—

99.8%

KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—