Loading
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
Use CWE-416, Microsoft vendor hub and Internet Explorer product page to widen CVE-2012-4792 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2021-27085, CVE-2021-26411 and CVE-2020-0878 for nearby disclosures in the same product family. Additional editorial context is available in Weekly Security Roundup: Navigating the April 2026 Threat Landscape and Critical Framework Exploits.