Cyber Resilience

CVE-2014-4113

Microsoft Windows Server 2008 r2

CISA KEVActive ExploitationEUVD ExploitedPublic PoC
Published
15 October 2014
Modified
22 April 2026
KEV Added
04 May 2022
Patch / advisory
View advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.87 99.7th percentile
Risk Priority 83 floored blend · peak EPSS

Summary

CVE-2014-4113 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 0.3% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability CVE-2014-4113 resides in win32k.sys within the kernel-mode drivers and affects Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1. It enables local privilege escalation when a crafted application is executed on the system.

Local users without administrative rights can exploit the flaw by running a malicious application, resulting in elevation to higher privileges. The issue carries a CVSS score of 7.8 and was actively exploited in the wild during October 2014.

Public references including Trend Micro analysis, Microsoft Security Research and Defense guidance, OSVDB, Packet Storm exploit code, and Secunia advisories address risk assessment and available updates for the Win32k.sys Elevation of Privilege Vulnerability.

EU & UK References

Vulnerability Data

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1…

more

allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."

CWE(s)
NVD-CWE-noinfo
KEV Date Added
04 May 2022

Related Threats

CVEs Like This One

CVE-2014-4148Same product: Microsoft Windows 7both on KEV
CVE-2015-2360Same product: Microsoft Windows 7both on KEV
CVE-2014-6332Same product: Microsoft Windows 7both on KEV
CVE-2015-2387Same product: Microsoft Windows 7both on KEV
CVE-2014-4123Same product: Microsoft Windows 7both on KEV
CVE-2013-7331Same product: Microsoft Windows 7both on KEV
CVE-2013-3918Same product: Microsoft Windows 7both on KEV
CVE-2014-2817Same product: Microsoft Windows 7both on KEV
CVE-2014-6352Same product: Microsoft Windows 7both on KEV
CVE-2014-4114Same product: Microsoft Windows 7both on KEV

Affected Assets

microsoft
windows 7
all versions
microsoft
windows 8
all versions
microsoft
windows 8.1
all versions
microsoft
windows rt
all versions
microsoft
windows rt 8.1
all versions
microsoft
windows server 2003
all versions
microsoft
windows server 2008
all versions, r2
microsoft
windows server 2012
all versions, r2
microsoft
windows vista
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References