# CVE-2010-0806

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."

- Page: https://www.vulneraibility.com/cve/CVE-2010-0806
- CVSS: 8.8
- Known exploited: yes, in CISA KEV since 2026-05-20; CISA due date 2026-06-03
- EPSS: 82.24%
- Public exploit code: 2 on Exploit-DB · 1 Metasploit module (first 2010-03-10)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2026-05-20)
- Weakness: CWE-416
- Published: 2010-03-10

## Affected

- microsoft:internet_explorer

## References

- [other] http://osvdb.org/62810
- [advisory] http://www.us-cert.gov/cas/techalerts/TA10-089A.html
- [other] http://www.securityfocus.com/bid/38615
- [other] http://www.vupen.com/english/advisories/2010/0567
- [advisory] http://secunia.com/advisories/38860
- [advisory] http://www.us-cert.gov/cas/techalerts/TA10-068A.html
- [advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
- [other] http://www.microsoft.com/technet/security/advisory/981374.mspx
- [other] https://exchange.xforce.ibmcloud.com/vulnerabilities/56772
- [other] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446
- [other] http://www.vupen.com/english/advisories/2010/0744
- [other] http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx
- [advisory] http://www.kb.cert.org/vuls/id/744549
- [advisory] https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0806

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.