CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2014-10-15
Microsoft Windows OLE Remote Code Execution Vulnerability (CVE-2014-4114, Sandworm APT)
[Affected Scope] Windows Vista SP2, 7 SP1, 8, 8.1, Windows Server 2008/2012, and RT systems
[Impact] Remote attackers can execute arbitrary code with user privileges by tricking a user into opening a crafted Office document containing a malicious OLE object
[Mitigation] Apply the MS14-060 official security patch and restrict execution of untrusted Office attachments