CVE-2014-2817highunder attack

CVE-2014-2817

Published · Updated

Follow this CVE+ Monitor Internet Explorer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

56Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 26%
from disclosure to weapon
Published on NVDAug 12
CISA KEV+2843d
Action required by CISAfederal deadline: 2022-06-15

Apply updates per vendor instructions.

In short

A flaw in Microsoft Internet Explorer versions 6 through 11 allows attackers to gain elevated system privileges by tricking users into visiting a malicious website. This is dangerous because it lets attackers bypass security protections and take full control of the affected computer.

Technical detail

Elevation of privilege vulnerability in IE 6-11 exploitable through specially crafted web content delivered via remote attack vector. Requires user interaction (visiting a malicious site) but results in privilege escalation, allowing attackers to execute arbitrary code with elevated system rights.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a