CVE Watch—

CVE-2010-3962

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

CVSS

—

No CVSS

EPSS

96.9%

p100

KEV

YES

Oct 6, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

96.9%EPSS · 30 days96.9%

2026-06-302026-07-16

KEV catalog record

Product

Microsoft / Internet Explorer

Vulnerability

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

Added to KEV

Oct 6, 2025

Remediate by

Oct 27, 2025

Known ransomware use

Summary description

Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/2458511?redirectedfrom=MSDN ; https://nvd.nist.gov/vuln/detail/CVE-2010-3962

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2016-0189—

99.8%

KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2010-0249—

99.8%

KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2020-0674—

99.7%

KEV—80Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability—CVE-2014-1776—

99.7%

KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2013-3893—

99.7%

KEV—80Microsoft Internet Explorer Resource Management Errors Vulnerability—CVE-2014-0322—

99.7%

KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—