Vulnerabilitycritical

Microsoft Update Tuesday October 2013: Another IE 0

Cisco TalosOct 8, 2013 · 20:49 UTC (Oct 8, 2013)2 min read2 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2013-3893 CVE-2013-3897 CVE-2013-3200 CVE-2013-3128 CVE-2013-3195 CVE-2013-3889 CVE-2013-3890 CVE-2013-3895 CVE-2013-3891 CVE-2013-3896

Tags: cve-2013-3893 cve-2013-3897 cve-2013-3200 cve-2013-3128 cve-2013-3195 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2013-3893	Memory Corruption RCE in Microsoft Internet Explorer	—	88%	KEV	— KEV Aug 12, 2025
CVE-2013-3896	Information Disclosure in Microsoft Silverlight via Improper Pointer Validation	—	67%	KEV	— KEV May 25, 2022
CVE-2013-3897	Use-After-Free RCE in Microsoft Internet Explorer (CVE-2013-3897)	—	77%	KEV	— KEV Mar 3, 2022

From the original article

2 min read at blog.talosintelligence.com

This month's Microsoft Tuesday Update brings us 8 bulletins for a total of 26 CVEs. Four of these bulletins are marked as critical, while the rest are marked as important. The most important update this month is a cumulative update for IE ( MS13-080 ), which fixes 10 CVE issues, 2 of which have already been exploited by attackers.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.