coldbraid

CVE-2014-6352 Microsoft Windows

Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.

CVSS
not scored

CWE-94

On CISA’s exploited list

Microsoft Windows Code Injection Vulnerability

Added
2022-02-25
Federal patch deadline
2022-08-25
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)