HIGHCVSS 8.8Actively exploited · CISA KEV since 2025-10-06Vulnerability
CVE-2013-3918
Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Properties
- Vulnerability name
- Microsoft Windows Out-of-Bounds Write Vulnerability
- First seen
- 2025-10-22T00:05:40+00:00
- Cvss score
- 8.8
- Epss score
- 0.73693
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2025-10-27
- Euvd assigner
- microsoft
- Retrieved at
- 2026-10-21T01:24:47+00:00
- Exploited euvd since
- 2025-10-06T00:00:00+00:00
- Src batch id
- epss_history-20261020T103617Z-728ddd
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2025-10-06
- Score
- 8.8
- Euvd base score version
- 3.1
- Fetched at
- 2026-10-20T10:36:20+00:00
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 8.8
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Vendor project
- Microsoft
Related Entities (17)
AFFECTS_PRODUCT (14)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph