CVE-2010-0806
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
Coverage 1 source
-
2026-05-20
CISA Cybersecurity Advisories
critical
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CISA adds 7 vulnerabilities to its Known Exploited Vulnerabilities Catalog due to active exploitation.
Mentioned with
CVE-2008-4250 CVE-2009-1537 CVE-2009-3459 CVE-2010-0249
Also covered
- CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
- CVE-2026-91191 Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature
- CVE-2026-86950 Apple iOS and iPadOS
- CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting
- CVE-2026-72510 Toptech TMS7 and TopHAT SQL Injection