CVE-2013-6791: Microsoft Enhanced Mitigation Experience Toolkit

Medium severity, CVSS 4.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection mechanism via a return-oriented programming (ROP) attack.

Affected products

• Microsoft Enhanced Mitigation Experience Toolkit: up to and including 3.0

Published 2013-11-29. Last modified 2026-06-17.