Actively exploited · Published Apr 27, 2014 · Assigned by microsoft

CVE-2014-1776

Critical 9.8 Exploited

In plain English

A critical-severity use-after-free in Internet Explorer from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on January 28, 2022). The chance it is exploited in the next 30 days is estimated at 82.7% (higher than 99.7% of all known vulnerabilities). Apply updates per vendor instructions.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)82.7%top 0.3% of all CVEs

Exploited in the wildYesCISA KEV since Jan 28, 2022

Attack toolingNoneno public tooling known

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Jul 28, 2022.

Official description

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014. NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that "VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks."

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

1030154 vdb-entry, x_refsource_SECTRACK
106311 vdb-entry, x_refsource_OSVDB
MS14-021 vendor-advisory, x_refsource_MS
http://blogs.technet.com/b/srd/archive/2014/04/30/protection-strategies-for-the-security-advisory-2963983-ie-0day.aspx x_refsource_CONFIRM
57908 third-party-advisory, x_refsource_SECUNIA
http://www.signalsec.com/cve-2014-1776-ie-0day-analysis/ x_refsource_MISC
http://www.fireeye.com/blog/uncategorized/2014/04/new-zero-day-exploit-targeting-internet-explorer-versions-9-through-11-identified-in-targeted-attacks.html x_refsource_MISC
VU#222929 third-party-advisory, x_refsource_CERT-VN
https://technet.microsoft.com/library/security/2963983 x_refsource_CONFIRM
67075 vdb-entry, x_refsource_BID
https://www.vicarius.io/vsociety/posts/cve-2014-1776-use-after-free-vulnerability-in-microsoft-internet-explorer-mitigation-scripts
https://www.vicarius.io/vsociety/posts/cve-2014-1776-use-after-free-vulnerability-in-microsoft-internet-explorer-detection-script
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-1776 government-resource