CVE-2014-0322

A use-after-free vulnerability in Internet Explorer allowed remote attackers to execute code.

This use-after-free flaw in Microsoft Internet Explorer enabled remote code execution, allowing attackers to compromise systems without user interaction. DIB organizations must ensure legacy browsers are patched or replaced, as unpatched CVEs in widely deployed software remain a primary compliance risk under NIST 800-171. The vulnerability was actively exploited in the wild, demonstrating the severe consequences of delaying patches on critical infrastructure.

Shame score — A known, remotely exploitable code execution flaw in a widely deployed browser remained unpatched long enough to be actively exploited in the wild, representing a severe negligence failure in patch management.