CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows OLE Remote Code Execution Vulnerability (CVE-2014-6352) Analysis and Mitigation Guide
[Affected Scope] Windows Vista SP2, 7 SP1, 8, 8.1, Windows Server 2008/2012, and Windows RT systems
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via crafted OLE objects embedded in Office documents
[Mitigation] Apply the MS14-064 official security update immediately, or implement OLE execution blocking workarounds
Microsoft Windows OLE Remote Code Execution Vulnerability (CVE-2014-4114, Sandworm APT)
[Affected Scope] Windows Vista SP2, 7 SP1, 8, 8.1, Windows Server 2008/2012, and RT systems
[Impact] Remote attackers can execute arbitrary code with user privileges by tricking a user into opening a crafted Office document containing a malicious OLE object
[Mitigation] Apply the MS14-060 official security patch and restrict execution of untrusted Office attachments