Microsoft Internet Explorer Resource Management Errors Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Sep 18, 2013 · Catalog

   Detected

   Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.

2. Aug 12, 2025 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

3. Sep 2, 2025 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

4. Jun 16, 2026 · Catalog

   Updated

   Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.

Affected

• cpe microsoft/internet explorer10
• cpe microsoft/internet explorer11
• cpe microsoft/internet explorer6
• cpe microsoft/internet explorer7
• cpe microsoft/internet explorer8
• cpe microsoft/internet explorer9
• vendor Microsoft Internet Explorerversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2013-3893

  Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  cisa.gov
• CVE.orgVulnerability recordCVE-2013-3893

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2013-3893

  30-day exploitation probability 87.5%

  first.org
• Exploit DatabasePublic exploit reference28682

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• Exploit DatabasePublic exploit reference49872

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• Metasploit ModulesPublic exploit moduleexploit_windows/browser/ie_setmousecapture_uaf

  Public module reference (normal). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDVulnerability recordCVE-2013-3893

  Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.d

  nvd.nist.gov

References

• Exploit · blogs.technet.com
• Vendor Advisory · blogs.technet.com
• Third Party Advisory · jvn.jp
• Vendor Advisory · technet.microsoft.com
• Vendor Advisory · docs.microsoft.com
• CISA note · learn.microsoft.com
• CISA note · nvd.nist.gov