Microsoft · Win32k
CVE-2014-4113
Microsoft Win32k Privilege Escalation Vulnerability
What it is
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."
CISA: Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 25, 2022
- Added to the CISA list
- May 4, 2022
- Published
- October 15, 2014
- Severity
- High 7.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 87% in the top 0.3% of all known vulnerabilities
- Weakness
- CWE-264
- More details
- NVD · CVE.org · CISA
All references (11)
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-058
- http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx
- http://packetstormsecurity.com/files/131964/Windows-8.0-8.1-x64-TrackPopupMenu-Privilege-Escalation.html
- http://secunia.com/advisories/60970
- https://www.exploit-db.com/exploits/37064/
- http://www.securityfocus.com/bid/70364
- http://osvdb.org/show/osvdb/113167
- https://www.exploit-db.com/exploits/39666/
- http://www.exploit-db.com/exploits/35101
- https://github.com/sam-b/CVE-2014-4113
- http://blog.trendmicro.com/trendlabs-security-intelligence/an-analysis-of-a-windows-kernel-mode-vulnerability…
More exploited flaws from Microsoft
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 22, 2023 | Privilege Escalation | Win32k | High 7.8 | 14% |
| May 9, 2023 | Privilege Escalation | Win32k | High 7.8 | 41% |
| May 25, 2022 | Privilege Escalation | Win32k | High 8.8 | 15% |
| May 23, 2022 | Privilege Escalation | Win32k | High 7.8 | 3.0% |
| Apr 25, 2022 | Privilege Escalation | Win32k | High 7.8 | 1.6% |
| Apr 25, 2022 | Privilege Escalation | Win32k | High 7.8 | 1.6% |
| Mar 28, 2022 | Privilege Escalation | Win32k | High 7.8 | 39% |
| Mar 15, 2022 | Memory Corruption | Win32k | High 8.2 | 10% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.