Vulnerability in Microsoft Internet Explorer
CVE-2014-8967
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted HTML document in conjunction with a Cascading Style Sheets (CSS) token sequence specifying the run-in value for the display property, leading to improper CElement reference counting.
EPSS: 0.124 (95.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer
- N/a — versions n/a
References
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_MISC)