CVE-2014-4113
KEVHIGH 7.8EPSS 86.9%
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."
- CVSS v3.1 CNA
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 86.93% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-05-04
- Published
- 2014-10-15
- Updated
- 2025-10-22
Proof-of-concept exploits (8)
- http://packetstormsecurity.com/files/131964/Windows-8.0-8.1-x64-TrackPopupMenu-Privilege-…
- http://www.exploit-db.com/exploits/35101
- johnjohnsp1/CVE-2014-41133★ · 2014-11-19
- nsxz/Exploit-CVE-2014-41135★ · 2016-01-22
- r3p3r/nixawk-awesome-windows-exploitation201★ · 2018-01-01
- sam-b/CVE-2014-411341★ · 2016-02-14
- sathwikch/windows-exploitation55★ · 2018-12-20
- wikiZ/cve-2014-41131★ · 2020-11-30
Metasploit modules (3)
- rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms16_075_reflectio…
- rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms14_058_track_pop…
- rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms16_075_reflectio…
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/37064
- https://www.exploit-db.com/exploits/35101
- https://www.exploit-db.com/exploits/46945
- https://www.exploit-db.com/exploits/39666
Exploit collections (1)
- CVE-2014-4113-Exploit.rarhelloexp/0day
Security advisories
- http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-sec…
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-058
- http://www.securityfocus.com/bid/70364