CVE-2010-3343

highpriority · attend · 47EPSS 0.284 · 98 %ileEUUS

grimoire priorityP1 · Urgent

Exploitable?

—

no known exploitation

Likely / severe?

28.4% (98th) EPSS

CVSS 9.3 · high

Is it mine?

2 products

Check your exposure

Who says so?

2 sources

enisa_euvd · nvd

EPSS · scored 2026-10-27

Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

cvss

Technical severity, 0–10. One row per scoring source.

9.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 10

v2.07.9highAV:N/AC:M/Au:N/C:C/I:C/A:C/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-908USprimary

affected products (2)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
microsoft internet explorer= 6nvdUScpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd nvd NVD CVE.org MITRE

published 2010-12-16modified 2026-06-16

related (1,064)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-85880US	high7.8OT critical	0.39% (33rd)	KEV	2026-09-08
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2025-5777US	high7.5OT critical	100.0% (100th)	KEV	2025-06-17
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2024-50302US	medium5.5OT critical	0.81% (57th)	KEV	2024-11-19
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in variou…
CVE-2024-29745US	medium5.5OT critical	0.49% (42nd)	KEV	2024-04-05
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interacti…
CVE-2008-0081US	critical9.8	57.9% (99th)	Exploit	2008-01-16
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via cra…

+1059 more

references (8)

External citations — patches, advisories, analysis.

http://www.securitytracker.com/id?1024872 enisa_euvd
http://www.us-cert.gov/cas/techalerts/TA10-348A.html enisa_euvd
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 enisa_euvd
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12372 enisa_euvd
http://www.securitytracker.com/id?1024872Broken LinkThird Party AdvisoryVDB Entrynvd
http://www.us-cert.gov/cas/techalerts/TA10-348A.htmlThird Party AdvisoryUS Government Resourcenvd
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090PatchVendor Advisorynvd
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12372Tool Signaturenvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan