CVE-2009-1918

CVE-2009-1918 is a critical memory corruption vulnerability affecting multiple versions of Microsoft Internet Explorer (5.01 SP4 through 8) across various Windows operating systems. It allows remote attackers to execute arbitrary code by crafting a malicious HTML document that exploits improper handling of table operations, specifically when adding malformed elements to an empty DIV. This vulnerability carries a maximum CVSS score of 10.0, indicating a severe risk with network-based attacks requiring low complexity and no authentication, leading to complete compromise of confidentiality, integrity, and availability. Its high EPSS and FAUCET Risk Score further emphasize its potential impact. Despite its high severity, there is no evidence of active exploitation in the wild, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability also lacks significant community discussion or media coverage, suggesting it may not be widely targeted.