IDORSSRFAUTH BYPASSJWT FORGERYRACE CONDITIONXXEBROKEN OBJECT-LEVEL AUTHPRIVILEGE ESCALATIONMASS ASSIGNMENTGRAPHQL INTROSPECTION ABUSEIDORSSRFAUTH BYPASSJWT FORGERYRACE CONDITIONXXEBROKEN OBJECT-LEVEL AUTHPRIVILEGE ESCALATIONMASS ASSIGNMENTGRAPHQL INTROSPECTION ABUSE
Impactr Logoimpactr
FeaturesHow it worksEvidencePricingLearnVulnerability DBCompare
  1. Home
  2. Vulnerability Database
  3. CVE-2012-4792
CVE-2012-4792 CISA KEV — actively exploited

Microsoft Internet Explorer Use-After-Free Vulnerability

n/a — n/a

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.

CVSS scoreHigh

8.8

EPSS — exploitation probabilityHigh

78.8%

Vector breakdown

Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Published
Dec 30, 2012
Modified
Oct 22, 2025
Added to KEV
Jul 23, 2024
Federal patch due
Aug 13, 2024

CISA required action

The impacted product is end-of-life and should be disconnected if still in use.

Weakness classification

CWE-416Use After Free

Proof-of-concept & exploitation references

Weaponization

Nuclei template

Not found

Metasploit module

Not found

Public repositories whose name or description references CVE-2012-4792, found via a live GitHub search at request time. These are community-sourced signals, not a verified working exploit - cross-check each one before relying on it, and treat higher star counts and recent activity as (weak) corroboration, not proof.

No public GitHub repositories referencing CVE-2012-4792 were found at last check. Absence here is not proof no exploit exists - see the references below for vendor advisories and write-ups.

References

  • us-cert.gov
  • docs.microsoft.com
  • kb.cert.org
  • github.com
  • labs.alienvault.com
  • packetstormsecurity.com
  • eromang.zataz.com
  • oval.cisecurity.org
  • us-cert.gov
  • blog.fireeye.com
  • blogs.technet.com
  • technet.microsoft.com
  • blogs.technet.com

Frequently asked questions

What is CVE-2012-4792?

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.

How severe is CVE-2012-4792?

CVE-2012-4792 has a CVSS base score of 8.8 out of 10 (CVSS 3.1).

Is CVE-2012-4792 actively exploited in the wild?

Yes. CVE-2012-4792 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added Jul 23, 2024, meaning CISA has confirmed evidence of active exploitation.

What is the EPSS score for CVE-2012-4792?

78.8% - meaning FIRST.org's EPSS model estimates a 78.8% probability this vulnerability will be exploited in the wild within 30 days (100% percentile among all scored CVEs).

What type of vulnerability is CVE-2012-4792?

CVE-2012-4792 is classified under CWE-416 (CWE-416 Use After Free).

Cross-checked against

  • NVD (NIST)
  • MITRE CVE Record
  • CISA KEV
  • FIRST.org EPSS
  • GitHub Advisory Database
  • GitHub public repository search

Impactr finds and proves whether CVE-2012-4792 - or flaws like it - are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.

Join the waitlist
← Vulnerability database
Impactr Logoimpactr

Built by hackers, for the code you ship. Autonomous AI penetration testing for modern web apps and APIs.

© 2026 Impactr

Product

FeaturesCoverageUse casesEvidencePricingWaitlist

Resources

VulnerabilitiesVulnerability databaseGuidesComparisonsGlossaryCWE databaseBy industryBy languageHTTP status codesSecurity headers

Company

ContactTwitterLinkedInGitHub