Cloudanix VulnDB

CVE-2014-6352

High · 7.8 CISA KEV

CVSS

7.8

EPSS

77.5%

Published

Oct 22, 2014

CISA due date

Aug 25, 2022

The record

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the wild in October 2014 with a crafted PowerPoint document.

Affected packages

Ecosystem Package Introduced Fixed