Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by…

published 2011-06-16 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-1268

cvss: 9.3; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 67.3%; EPSS 67.3% chance of exploitation in 30 days, percentile 99.3%
public exploits: 2; Metasploit, Exploit-DB

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."

Timeline

2011-06-16 First public exploit (Metasploit exploit/windows/browser/ms11_050_mshtml_cobjectelement)
2011-06-16 Published

Exploit prediction

67.33% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

Metasploit exploit/windows/browser/ms11_050_mshtml_cobjectelement MS11-050 IE mshtml!CObjectElement Use After Free metasploit exploit, normal rank, 2011-06-16
EDB-17409 Microsoft Internet Explorer - MSHTML!CObjectElement Use-After-Free (MS11-050) (Metasploit) remote, 2011-06-17

CVSS scores

assigned by	version	score	vector
NVD	2.0	9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

docs.microsoft.com /en-us/security-updates/securitybulletins/2011/ms11-050
vendor-advisory
oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12308
vdb-entry, signature
securityreason.com /securityalert/8275
third-party-advisory

Sources

CVE List CVE-2011-1260
NVD CVE-2011-1260

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary