CVE-2010-0249: HIGH (CVSS 8.8), Actively Exploited (CISA KEV)

HIGH (CVSS 8.8), Actively Exploited (CISA KEV), EPSS 91.9%. Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a