CVE-2014-1770

No fix known EPSS 35%

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript code that interacts improperly with a CollectGarbage function call on a CMarkup object allocated by the CMarkup::CreateInitialMarkup function.

Published 2014-05-22 · CVE record · OSV

Products: microsoft internet_explorer