CVE-2013-3893

No fix known ExploitedEPSS 88%CVSS 8.8

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.

Published 2013-09-18 · In CISA KEV since 2025-08-12 · CVE record · OSV

Products: microsoft internet_explorer