Actively exploited · Published Oct 22, 2014 · Assigned by microsoft

CVE-2014-6352

High 7.8 Exploited

In plain English

A high-severity security flaw in Windows from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on February 25, 2022). The chance it is exploited in the next 30 days is estimated at 77.5% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Apply updates per vendor instructions.

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)77.5%top 0.4% of all CVEs

Exploited in the wildYesCISA KEV since Feb 25, 2022

Attack tooling1Metasploit

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Aug 25, 2022.

Official description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the wild in October 2014 with a crafted PowerPoint document.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

ms-win-ole-cve20146352-code-exec(97714) vdb-entry, x_refsource_XF
http://twitter.com/ohjeongwook/statuses/524795124270653440 x_refsource_MISC
61803 third-party-advisory, x_refsource_SECUNIA
MS14-064 vendor-advisory, x_refsource_MS
1031097 vdb-entry, x_refsource_SECTRACK
http://blogs.technet.com/b/srd/archive/2014/11/11/assessing-risk-for-the-november-2014-security-updates.aspx x_refsource_CONFIRM
70690 vdb-entry, x_refsource_BID
https://technet.microsoft.com/library/security/3010060 x_refsource_CONFIRM
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6352 government-resource