Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.
Use CWE-416, Microsoft vendor hub and Internet Explorer product page to widen CVE-2013-2551 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2021-27085, CVE-2021-26411 and CVE-2020-0878 for nearby disclosures in the same product family. Additional editorial context is available in Weekly Security Roundup: Navigating the April 2026 Threat Landscape and Critical Framework Exploits.