coldbraid

CVE-2014-4114 Microsoft Windows

A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.

CVSS
not scored

CWE-20

On CISA’s exploited list

Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

Added
2022-03-03
Federal patch deadline
2022-03-24
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)

NVDCVE.orgAll exploited vulnerabilities