Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted web page that is accessed by Internet Explorer, as exploited in the wild in November 2013, aka "InformationCardSigninHelper Vulnerability."
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2025-10-27. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 10 products
CVE-2013-3918: CVE-2013-3918: Windows ActiveX (icardie.dll) out-of-bounds write allows RCE via crafted webpage; CISA added to KEV—remediate or discontinue EoL/EoS.
Post summary
CISA has listed CVE-2013-3918 in the KEV, confirming it is being exploited in the wild to achieve remote code execution via crafted web pages, and the advisory recommends remediation or discontinuation.
https://research.lyrie.ai/research/active-exploit-cve-2013-3918-windows #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The provided link suggests that CVE‑2013‑3918 is actively exploited on Windows, but the message lacks detailed evidence or additional context.
14 of 14 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_7 | - | - | - |
| OS | microsoft | windows_8 | - | - | - |
| OS | microsoft | windows_8.1 | - | - | - |
| OS | microsoft | windows_rt | - | - | - |
| OS | microsoft | windows_rt_8.1 | - | - | - |
| OS | microsoft | windows_server_2003 | - | - | - |
| OS | microsoft | windows_server_2008 | r2 | - | itanium |
| OS | microsoft | windows_server_2008 | r2 | - | x64 |
| OS | microsoft | windows_server_2008 | sp2 | - | - |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_vista | - | - | - |
| OS | microsoft | windows_xp | - | - | x64 |
| OS | microsoft | windows_xp | - | - | - |