CVE-2012-1878

CVE-2012-1878 is a critical remote code execution vulnerability affecting Microsoft Internet Explorer versions 6 through 9, impacting various Windows operating systems. This flaw stems from improper memory handling, allowing attackers to execute arbitrary code by manipulating deleted objects via the "OnBeforeDeactivate" event. With a CVSS score of 9.3, it presents a high-severity threat due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploit intelligence like Metasploit modules or ExploitDB entries are available, and there's minimal community discussion, its high EPSS and FAUCET risk scores indicate a significant potential for exploitation despite not being on the CISA KEV catalog.