CVE-2013-2551

A Microsoft Internet Explorer use-after-free vulnerability allowed remote code execution via crafted websites and is actively exploited in ransomware attacks.

This vulnerability in Internet Explorer, now end-of-life, enables remote code execution, posing a significant risk to DIB organizations still using the browser. Its active exploitation by ransomware highlights the severe compliance impact of outdated software and necessitates immediate remediation, including browser replacement.

Shame score — The continued exploitation of a known vulnerability in an end-of-life product demonstrates a failure to maintain basic security hygiene and exposes organizations to significant risk.