Vulnerability identifier: #VU4865

Vulnerability risk: Medium

CVSSv3.1: 8.4 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2014-4113

CWE-ID: CWE-119

Exploitation vector: Local

Exploits in database: 10

• June 17, 2021
  • Microsoft Windows - Net-NTLMv2 Reflection DCOM/RPC (Metasploit) [Exploit-DB]
  • Microsoft Windows 8.1/ Server 2012 - 'Win32k.sys' Local Privilege Escalation (MS14-058) [Exploit-DB]
• July 15, 2020
  • winmagic_sd (Technical Write-Up on and PoC Exploit for CVE-2020-11519 and CVE-2020-11520) [Github]
• June 2, 2020
  • WindowsExploitationResources (Resources pertaining to advanced Windows exploit development and semi-related topics) [Github]
• April 7, 2020
  • Exploit-CVE-2014-4113 (Exploit CVE-2014-4113) [Github]
• March 18, 2020
  • CVE-2014-4113 (Trigger and exploit code for CVE-2014-4113) [Github]
  • Microsoft Windows Kernel - 'win32k.sys' Privilege Escalation (MS14-058) [Exploit-DB]
  • Microsoft Windows 8.0/8.1 (x64) - 'TrackPopupMenu' Privilege Escalation (MS14-058) [Exploit-DB]
  • Microsoft Windows - TrackPopupMenu Win32k Null Pointer Dereference (MS14-058) (Metasploit) [Exploit-DB]
  • Windows TrackPopupMenu Win32k NULL Pointer Dereference [Metasploit]

Impact: Code execution

Vulnerable software:
Windows Server
Operating systems & Components / Operating system
Windows
Operating systems & Components / Operating system

Vendor: Microsoft