CVE-2013-4015

medium Microsoft
CVSS v3 Base Score
6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS Score
4.4%
Exploitation probability in 30 days
Top 11% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C
Published: July 26, 2013 (4675 days ago)
Last Modified: April 29, 2026
Vendor: Microsoft
Source: NVD

Description

Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mode or (2) Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code.

CWE

CWE-264

Affected Products

microsoft internet explorer

References

🔗 docs.microsoft.com 🔗 exchange.xforce.ibmcloud.com 🔗 docs.microsoft.com 🔗 exchange.xforce.ibmcloud.com