CVE-2014-8967: Microsoft Internet Explorer

Medium severity, CVSS 6.8. EPSS: 12.4% chance of exploitation in the next 30 days.

Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted HTML document in conjunction with a Cascading Style Sheets (CSS) token sequence specifying the run-in value for the display property, leading to improper CElement reference counting.

Affected products

• Microsoft Internet Explorer: affected versions not specified

Published 2014-12-15. Last modified 2026-06-17.