CVE-2013-1347
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.
Attention and evidence
Evidence confidence: Exploitation recorded
Hype components
Sources and documents
Score evolution
● Hype ● Reality
Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.
First record: hype 0.0 · reality 8.7 (2026-11-02 15:12). The curve appears once the score changes.
Public exploit evidence
Public exploit entries / repo candidates
Source entries and unverified repository candidates are counted separately.
Evidence context and dated references
Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.
Evidence in context
- Confidence in exploitation evidence
- Exploitation recorded
- Priority basis
- Recorded exploitation; CVSS 8.8; EPSS 77.7%
- Attention, last 30 days
- 0 distinct story titles; 0 press documents; 0 publisher domains.
- Technical potential
- network access, no prior privileges, user interaction.
- Observed activity
- Exploitation recorded in CISA KEV.
- Known scale
- Not quantified.
- Evidence confidence basis
- Trusted exploitation confirmation
Score evaluated: 2026-11-05 13:57:31.572064+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z