CVE-2014-1776criticalunder attackCWE-416

CVE-2014-1776

Published · Updated

Follow this CVE+ Monitor Internet Explorer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

80Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and 1 threat group(s) use it.

ssvc Actcvss 9.8epss 83%
from disclosure to weapon
Published on NVDApr 27
CISA KEV+2833d
Who exploits it — 1

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

APT / StateAPT3🇨🇳 MITRE ATT&CK
Action required by CISAfederal deadline: 2022-07-28

Apply updates per vendor instructions.

In short

A use-after-free bug in Internet Explorer allows attackers to run malicious code or crash the browser by exploiting how the browser handles certain memory objects. This was actively exploited in real attacks in April 2014.

Technical detail

Use-after-free vulnerability in the CMarkup::IsConnectedToPrimaryMarkup function across IE 6-11 enables remote code execution or denial of service through specially crafted web content. The vulnerability involves memory corruption when the browser attempts to access freed memory; exploitation requires no user privileges beyond visiting a malicious webpage.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014. NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that "VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks."
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a