Unrated severityNVD Advisory· Published Jun 16, 2011· Updated Apr 29, 2026

CVE-2011-1260

Description

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."

Affected products

Microsoft/Internet Explorer2 versions
cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

securityreason.com/securityalert/8275nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12308nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.064
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000