CVE-2013-1309

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-2551.

• CWE-416

• http://blog.skylined.nl/20161207001.html
• http://packetstormsecurity.com/files/140094/Microsoft-Internet-Explorer-MSHTML-CDispNode-InsertSiblingNode-Use-After-Free.html
• http://www.us-cert.gov/ncas/alerts/TA13-134AThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16396
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16738
• https://www.exploit-db.com/exploits/40893/
• http://blog.skylined.nl/20161207001.html
• http://packetstormsecurity.com/files/140094/Microsoft-Internet-Explorer-MSHTML-CDispNode-InsertSiblingNode-Use-After-Free.html
• http://www.us-cert.gov/ncas/alerts/TA13-134AThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16396
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16738
• https://www.exploit-db.com/exploits/40893/

Published

May 15, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1303Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2013-1304Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2013-1305HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Wi…
• CVE-2013-1306Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2013-1307Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2013-1308Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2013-1310Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2013-1311Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2013-1312Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2013-1313Object Linking and Embedding (OLE) Automation in Microsoft W…
• CVE-2013-1314Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-1315Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and …