Skip to main content
CVE-2013-3893VulnerabilityPublished 08/12/2025Updated 10/24/2026

CVE-2013-3893: Microsoft Internet Explorer Resource Management Errors Vulnerability

Affects Microsoft Internet ExplorerSource CISA KEV

Severity
High

No CVSS score published yet

Exploitation

Actively exploited – in CISA KEV since 08/12/2025

KEV deadline
09/02/2025
EPSS
87.6% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Weaknesses

References

Track Microsoft Internet Explorer with alerts and the API. See plans

Added 10/24/2026 · updated 10/24/2026