CVE-2013-1347VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2013-1347: Microsoft Internet Explorer Remote Code Execution Vulnerability

Affects Microsoft Internet ExplorerSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/24/2022
EPSS: 77.7% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2013-1347 (opens in a new tab)

Description

CVE-2013-1347 is a remote code execution vulnerability in Microsoft Internet Explorer that allows an attacker to corrupt memory and execute arbitrary code with the privileges of the current user. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the input data.

Summary

This vulnerability in Microsoft Internet Explorer enables memory corruption that can lead to arbitrary code execution within the security context of the current user. It has been observed in active exploitation scenarios. The vulnerability is identified as CWE-94 (Improper Control of Generation of Code). No explicit patch or remediation details are included in the provided data.

Impact

Successful exploitation allows an attacker to execute arbitrary code on the victim's system with the same privileges as the current user, potentially leading to full compromise depending on user rights. The vulnerability has been exploited in the wild, confirming its practical risk.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes are confirmed, users should exercise caution when using Internet Explorer and consider alternative browsers or security controls to reduce exposure.

Weaknesses

CWE-94Code Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:25:49 UTC

Weaknesses

References

Related threats