CVE-2010-3328

Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft...

8.8 High

Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet object, aka "Uninitialized Memory Corruption Vulnerability."

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

31.9%Down 30.4 points since Feb 4, 2022

What each source reports

NVD Score used 8.8

Record: CVE-2010-3328
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-416
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-3328
Updated: 2026-11-02

EUVDEUVD-2010-3326 No score

Record: EUVD-2010-3326
Updated: 2026-11-03

GitHub AdvisoriesGHSA-777c-wmxv-2wcq 8.8

Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft...

Record: GHSA-777c-wmxv-2wcq
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

Affected products

microsoft internet explorer

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3328 is a high vulnerability (CVSS 8.8) in Microsoft Internet Explorer, published October 13, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 31.9%, the 98th percentile. No source names a fixed version.