CVE-2013-7331VulnerabilityPublished 05/25/2022Updated 10/24/2026

CVE-2013-7331: Microsoft Internet Explorer Information Disclosure Vulnerability

Affects Microsoft Internet ExplorerSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/25/2022
KEV deadline: 06/15/2022
EPSS: 50.2% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2013-7331 (opens in a new tab)

Description

CVE-2013-7331 is an information disclosure vulnerability in Microsoft Internet Explorer that allows querying of resources loaded into memory. This flaw can enable attackers to detect the presence of anti-malware applications on a victim's system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

This vulnerability in Internet Explorer permits an attacker to query resources loaded into memory, potentially revealing information about anti-malware applications running on the system. It is classified under CWE-200 (Information Exposure). The vulnerability has been observed to be exploited in the wild, indicating active use by threat actors. However, no detailed version information or patch status is provided in the source data.

Impact

An attacker exploiting this vulnerability can gain information about anti-malware applications present on the target system, which may aid in evasion or further attacks. The information disclosure does not directly lead to system compromise but can facilitate more targeted attacks.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Microsoft advisories for updates regarding this vulnerability.

Weaknesses

CWE-200Information Exposure (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:49:31 UTC

Weaknesses

References

Related threats