What is the CVSS score of CVE-2013-3893?

CVE-2013-3893 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 81.2%.

Which versions of Microsoft are affected by CVE-2013-3893?

CVE-2013-3893 presents significant security risk rated CVSS 8.8. Successful exploitation could significantly impact the confidentiality, integrity, or availability of affected systems.

Is there a public PoC exploit available for CVE-2013-3893?

Yes, a public proof-of-concept exploit is available for CVE-2013-3893. Prioritise patching immediately. EPSS: 81.2%.

How to fix or mitigate CVE-2013-3893?

Within 24 hours: Identify all affected systems running the SetMouseCapture implementation in mshtml.dll in Microsof and apply vendor patches immediately. Monitor vendor channels for patch availability.

Microsoft CVE-2013-3893

HIGH

Resource Management Errors (CWE-399)

2013-09-18 secure@microsoft.com

Microsoft RCE

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 21, 2026 - 15:22 vuln.today

cvss_changed

Analysis Generated

Mar 26, 2026 - 11:18 vuln.today

Added to CISA KEV

Oct 22, 2025 - 01:15 cisa

CISA KEV

PoC Detected

Oct 22, 2025 - 01:15 vuln.today

Public exploit code

CVE Published

Sep 18, 2013 - 10:08 nvd

HIGH 8.8

DescriptionCVE.org

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.

AnalysisAI

Internet Explorer 6 through 11 contain a use-after-free vulnerability in the SetMouseCapture implementation that allows remote code execution through crafted JavaScript, exploited in targeted attacks via ms-help: URL protocol.

Technical ContextAI

The CWE-399 use-after-free occurs in the mouse capture subsystem of mshtml.dll. Attackers used crafted JavaScript strings to trigger the free and reuse cycle. The innovative exploitation technique used ms-help: protocol URLs to load hxds.dll, a non-ASLR module, providing predictable gadget addresses for ROP chains.