Actively exploited · CISA KEV
Actively exploitedCVE-2013-3893
- First PoC
- 4283 days →Metasploit
- 481 days →First cited attacker
Signals
- Exploited in the wild
- Yesadded 2025-08-12 · due 2025-09-02. An observation, not a forecast.
- EPSS · 30-day forecast
- 88%Chance of exploitation in the next 30 days, 100th percentile of all CVEs. A forecast; KEV outranks it.
- CVSS · NVD
- not stated by sourcesNo NVD record yet.
- Internet exposure
- not stated by sourcesNo exposure census on this CVE's dispatches.
Exploits
3 known · links onlyMetasploit1
This module exploits a use-after-free vulnerability that currents targets Internet Explorer 9 on Windows 7, but the flaw should exist in versions 6/7/8/9/10/11. It was initially found in the wild in Japan, but other regions such as English, Chinese, Korean, etc, were targeted as well. The vulnerability is due to how the mshtml!CDoc::SetMouseCapture function handles a reference during an event. An attacker first can setup two elements, where the
ruby · seen 2026-10-18
Exploit-DB2
created 2013-10-02
created 2021-05-17
On the wire
0 dispatchesNo dispatch on our wire has named this CVE yet.
Watch this one?
KEV additions reach Telegram and the KEV-only RSS as they land.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.