What is CVE-2012-1879?

CVE-2012-1879 is a high-severity vulnerability in Microsoft Internet Explorer, classified under Code Injection. CVSS score: 8.1/10. Published 2012-06-12.

How severe is CVE-2012-1879?

High severity. CVSS v3 base score is 8.1 out of 10.

RCE in Microsoft Internet Explorer

CVE-2012-1879

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location, aka "insertAdjacentText Remote Code Execution Vulnerability."

Vulnerability class: RCE (Remote Code Execution)

Published 2012-06-12 · last modified 2026-06-16.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.196 (97.3th percentile), scored 2026-10-08.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 97.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.196 · newest: 0.196 · change: 0.000

Affected products

Microsoft Internet Explorer — versions 7, 8, 9
Microsoft Windows 2003 Server
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008 — versions r2
Microsoft Windows Vista
Microsoft Windows Xp

Weakness classification (CWE)

CWE-94 — Code Injection

References

www.us-cert.gov/cas/techalerts/TA12-164A.html (US Government Resource, third-party-advisory)
oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:15588 (signature, vdb-entry)
docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 (vendor-advisory)

Frequently asked questions

What is CVE-2012-1879?: CVE-2012-1879 is a high-severity vulnerability in Microsoft Internet Explorer, classified under Code Injection. CVSS score: 8.1/10. Published 2012-06-12.
How severe is CVE-2012-1879?: High severity. CVSS v3 base score is 8.1 out of 10.