{"vulnerability": "CVE-2012-4792", "sightings": [{"uuid": "28dc857e-0d5f-460d-9e48-e062fb967d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/5253aa6d-9f64-46eb-8ab0-240d950d2109", "content": "", "creation_timestamp": "2013-10-08T06:47:43.000000Z"}, {"uuid": "0198d873-6a36-4c85-8449-bf09d704c848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/51c81103-ce78-44da-a3ac-1990ac1d4fa4", "content": "", "creation_timestamp": "2013-08-02T10:04:46.000000Z"}, {"uuid": "5c07b39a-0b8f-4956-89bc-b42870f70125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/5257e4a4-a694-4701-8cc4-42bdac1d4fa4", "content": "", "creation_timestamp": "2013-10-11T11:57:37.000000Z"}, {"uuid": "d38abf88-8644-4f4e-95d2-4ade5057bb8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/53db4964-af90-4c15-8a3f-68beac1d4fa4", "content": "", "creation_timestamp": "2014-08-01T08:49:58.000000Z"}, {"uuid": "a058dd9e-ad68-4ad3-bd05-977d293b4513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/fbdab90e-a77d-4393-a858-012c4b6180d1", "content": "", "creation_timestamp": "2020-10-09T15:59:29.000000Z"}, {"uuid": "e96941f6-01fd-4219-b594-84ddff01ff70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-07-23T18:10:02.000000Z"}, {"uuid": "f54b5100-7de9-4022-8f03-af5f908228b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "981efaa2-df71-442a-9837-3780f0be985e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:56.000000Z"}, {"uuid": "5a94c3e7-601d-4fe8-a12c-cca5a98914a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:07.000000Z"}, {"uuid": "d8165f33-21a7-46d2-8381-1bb7bf09b1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "3c4a025c-9d42-4f7c-a074-4318411ab626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:40.000000Z"}, {"uuid": "024901fe-1009-4925-b65c-563ceda7b476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:50.000000Z"}, {"uuid": "80dff684-3075-4d73-aa58-309b8099d10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2012-4792", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2e06c057-203e-4bea-bcb9-14cb29ca06c8", "content": "", "creation_timestamp": "2026-02-02T12:26:33.115377Z"}, {"uuid": "199cef8f-d82e-4479-a1ba-b7c4e0cb54a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-4792", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/23785", "content": "", "creation_timestamp": "2013-01-02T00:00:00.000000Z"}, {"uuid": "8edfe918-6052-44f2-bd04-a02187c0d236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-4792", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/23754", "content": "", "creation_timestamp": "2012-12-31T00:00:00.000000Z"}, {"uuid": "4f364183-4aa8-4306-b6d6-ad7c7f86927d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "Telegram/k__A0p-b84thzcP2QMTIHry8ejwBgov0krqQycEKk2X67Q", "content": "", "creation_timestamp": "2024-07-24T12:03:59.000000Z"}, {"uuid": "4ef1f691-a674-424f-a1b7-359a8a49777c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/15994", "content": "The Hacker News\nCISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe vulnerabilities are listed below -\n\nCVE-2012-4792 (CVSS score: 9.3) - Microsoft Internet Explorer Use-After-Free Vulnerability\nCVE-2024-39891 (CVSS score: 5.3) - Twilio Authy Information Disclosure", "creation_timestamp": "2024-07-24T12:03:55.000000Z"}, {"uuid": "34795556-68f5-4ad1-a098-207c4772474e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "exploited", "source": "Telegram/Hk1Metx-yFB56L2o3B2qICxlmJeldY8gBxw9jFlKaGfcJw", "content": "", "creation_timestamp": "2024-07-24T13:26:52.000000Z"}, {"uuid": "c3019e56-c837-4db0-a680-9fead2caf5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/3092", "content": "The Hacker News\nCISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe vulnerabilities are listed below -\n\nCVE-2012-4792 (CVSS score: 9.3) - Microsoft Internet Explorer Use-After-Free Vulnerability\nCVE-2024-39891 (CVSS score: 5.3) - Twilio Authy Information Disclosure", "creation_timestamp": "2024-07-24T12:03:55.000000Z"}, {"uuid": "6e3e2e3d-d12a-4b87-89fa-b5860dc3a227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "exploited", "source": "https://t.me/KomunitiSiber/2290", "content": "CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List\nhttps://thehackernews.com/2024/07/cisa-adds-twilio-authy-and-ie-flaws-to.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe vulnerabilities are listed below -\n\nCVE-2012-4792 (CVSS score: 9.3) - Microsoft Internet Explorer Use-After-Free Vulnerability\nCVE-2024-39891 (CVSS score: 5.3) - Twilio Authy Information Disclosure", "creation_timestamp": "2024-07-24T09:07:52.000000Z"}, {"uuid": "eee35ae3-8ee1-4490-82ba-18297f08ce9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "exploited", "source": "https://t.me/thehackernews/5300", "content": "\ud83d\udea8 CISA adds two security flaws to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation evidence\u2014a decade-old Microsoft IE flaw (CVE-2012-4792) and a recent Twilio Authy vulnerability (CVE-2024-39891). \n \nImmediate action is required for Federal agencies to mitigate these threats by August 13, 2024. \n \nRead: https://thehackernews.com/2024/07/cisa-adds-twilio-authy-and-ie-flaws-to.html", "creation_timestamp": "2024-07-24T08:39:10.000000Z"}, {"uuid": "b9c2fb79-0c4d-4a18-8f5f-609e43ae68bc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5a732458-145c-4c6b-a67a-0ea9e5699bd8", "content": "", "creation_timestamp": "2026-06-19T12:46:37.830674Z"}, {"uuid": "c892b59b-4979-4cd3-8ef4-c9433eaef63f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/809746c3-a30e-4bfd-a302-f7e7afd44c1f", "content": "", "creation_timestamp": "2026-06-23T14:05:55.541275Z"}, {"uuid": "dea870e9-e920-484c-a6be-19688d14153a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4792", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"eromang\", \"mahmud ab rahman\", \"juan vazquez \", \"sinn3r \", \"Peter Vreugdenhil\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Microsoft Internet Explorer. A\\n          use-after-free condition occurs when a CButton object is freed, but a reference\\n          is kept and used again during a page reload, an invalid memory that's controllable\\n          is used, and allows arbitrary code execution under the context of the user.\\n\\n          Please note: This vulnerability has been exploited in the wild targeting\\n          mainly China/Taiwan/and US-based computers.\", \"disclosure_date\": \"2012-12-27\", \"fullname\": \"exploit/windows/browser/ie_cbutton_uaf\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS13-008 Microsoft Internet Explorer CButton Object Use-After-Free Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ie_cbutton_uaf.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/ie_cbutton_uaf\", \"references\": [\"CVE-2012-4792\", \"OSVDB-88774\", \"US-CERT-VU-154201\", \"BID-57070\", \"MSB-MS13-008\", \"URL-http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html\", \"URL-http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/\", \"URL-http://technet.microsoft.com/en-us/security/advisory/2794220\", \"URL-http://blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx\", \"URL-http://blog.exodusintel.com/2013/01/02/happy-new-year-analysis-of-cve-2012-4792/\", \"URL-https://www.rapid7.com/blog/post/2012/12/29/microsoft-internet-explorer-0-day-marks-the-end-of-2012\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 8 on Windows XP SP3\", \"IE 8 on Windows Vista\", \"IE 8 on Windows Server 2003\", \"IE 8 on Windows 7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:03.858456Z"}]}