HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2014-1763

CVSS 10.0v2.0pub. 2014-04-27upd. 2026-05-06

Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Microsoft Internet Explorer

    APP
    Microsoft
    10119
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2015-0313CRITICAL9.8⚠ KEVPL ✓same product

Use-after-free w Adobe Flash Player umożliwiający RCE

CVE-2015-0311CRITICAL9.8⚠ KEVPL ✓same product

RCE w Adobe Flash Player — aktywnie exploitowana podatność 0-day

CVE-2014-1776CRITICAL9.8⚠ KEVPL ✓same product

Use-after-free w Microsoft Internet Explorer 6–11 umożliwia RCE

CVE-2013-0022CRITICAL9.0PL ✓same product

Use-after-free w Internet Explorer 9 umożliwia zdalne wykonanie kodu

CVE-2012-4787CRITICAL9.0PL ✓same product

Use-after-free w Microsoft Internet Explorer 9/10 umożliwia RCE