CRITICAL🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2014-1776

CVSS 9.8v3.1pub. 2014-04-27upd. 2026-04-21

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014. NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that "VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks."

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Microsoft Internet Explorer
APP
Microsoft
10116789
Microsoft Windows 7
OS
Microsoft
all versions
Microsoft Windows 8
OS
Microsoft
all versions
Microsoft Windows 8.1
OS
Microsoft
all versions
Microsoft Windows Rt
OS
Microsoft
all versions
Microsoft Windows Rt 8.1
OS
Microsoft
all versions
Microsoft Windows Server 2003
OS
Microsoft
all versions
Microsoft Windows Server 2008
OS
Microsoft
r2
Microsoft Windows Server 2012
OS
Microsoft
r2
Microsoft Windows Vista
OS
Microsoft
all versions
Microsoft Windows Xp
OS
Microsoft
all versions

CISA KEV — detailsi

Vendori: Microsoft ↗
Producti: Internet Explorer
Added to KEVi: January 28, 2022
Remediation deadline (US Federal)i: July 28, 2022(overdue)

🔧Advisory Microsoft↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.

🔴