CVE-2010-0491

CVE-2010-0491 is a critical use-after-free vulnerability affecting Microsoft Internet Explorer versions 5.01 SP4, 6, and 6 SP1, as well as several Windows operating systems. This flaw allows remote attackers to execute arbitrary code by manipulating HTML object properties with an onreadystatechange event handler. With a CVSS score of 9.3, it presents a high risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity and high EPSS and FAUCET risk scores, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.