CVE-2010-0806: Microsoft Internet Explorer Use-After-Free Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2026-05-20. EPSS: 82.2% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."

Affected products

• Microsoft Internet Explorer: version 5.01 only; version 6 only; version 8 only; version 7 only

Published 2010-03-10. Last modified 2026-06-16.