CVE-2014-4113

CVE Database · CVE-2014-4113

CVE-2014-4113

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

87.04%

Published

Oct 15, 2014

Modified

Apr 22, 2026

CISA Known Exploited Vulnerability

Added: 2022-05-04 · Due: 2022-05-25

Apply updates per vendor instructions.

Public PoC / Exploit (9)

All weaponized →

Exploit-DBMicrosoft Windows - TrackPopupMenu Win32k Null Pointer Dereference (MS14-058) (Metasploit)Exploit-DBMicrosoft Windows 8.1/ Server 2012 - 'Win32k.sys' Local Privilege Escalation (MS14-058)Exploit-DBMicrosoft Windows Kernel - 'win32k.sys' Local Privilege Escalation (MS14-058)Exploit-DBMicrosoft Windows 8.0/8.1 (x64) - 'TrackPopupMenu' Local Privilege Escalation (MS14-058)TrickestTrickest PoC index GitHub PoCsam-b/CVE-2014-4113★41 GitHub PoCnsxz/Exploit-CVE-2014-4113★5 GitHub PoCjohnjohnsp1/CVE-2014-4113★3 GitHub PoCwikiZ/cve-2014-4113★1

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products (11)

microsoft · windows_7vulnerable

microsoft · windows_8vulnerable

microsoft · windows_8.1vulnerable

microsoft · windows_rtvulnerable

microsoft · windows_rt_8.1vulnerable

microsoft · windows_server_2003vulnerable

microsoft · windows_server_2008vulnerable

microsoft · windows_server_2012vulnerable

References (20)