漏洞描述
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司开发的一款Web浏览器，是Windows操作系统附带的默认浏览器。 Microsoft IE中存在释放后重用漏洞，该漏洞源于程序没有正确处理CAttrArray对象。攻击者可通过操纵文档中的元素，强制程序重用已被释放的指针利用该漏洞在当前进程上下文中执行任意代码。
Microsoft Internet Explorer CAttrArray 释放后重用漏洞
PoC代码
暂无相关漏洞推荐
- （CVE-2025-53770）Microsoft SharePoint Server反序列化漏洞允许远程代码执行
- POC CVE-2019-0604: Microsoft SharePoint - Remote Code Execution
- POC CVE-2020-0646: Microsoft .NET Framework - Remote Code Execution
- POC CVE-2000-0114: Microsoft FrontPage Extensions - Information Disclosure
- POC CVE-2008-1547: Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection
- POC CVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution
- POC CVE-2018-2392: SAP Internet Graphics Server (IGS) - XML External Entity Injection
- POC CVE-2020-0618: Microsoft SQL Server Reporting Services - Remote Code Execution
- POC CVE-2020-16952: Microsoft SharePoint - Remote Code Execution
- POC CVE-2021-26855: Microsoft Exchange Server SSRF Vulnerability
- POC CVE-2021-31195: Microsoft Exchange Server - Cross-Site Scripting
- POC CVE-2021-36646: KodExplorer - Cross-Site Scripting
- POC CVE-2021-38647: Microsoft Open Management Infrastructure - Remote Code Execution