CVE-2014-4123
Microsoft Internet Explorer Privilege Escalation Vulnerability
Published Oct 15, 2014 · updated Jun 16, 2026 · n/a n/a
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2014 · Catalog
Detected
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.
May 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 15, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.
Required action
Apply updates per vendor instructions.
CISA due date Jun 15, 2022
Affected
- cpe microsoft/internet explorer10
- cpe microsoft/internet explorer11
- cpe microsoft/internet explorer7
- cpe microsoft/internet explorer8
- cpe microsoft/internet explorer9
- vendor Microsoft Internet Explorerversion unspecified
- vendor n/a n/aversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2014-4123
Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.
cisa.gov - CVE.orgVulnerability recordCVE-2014-4123
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.
cve.org - FIRST EPSSExploitation probabilityCVE-2014-4123
30-day exploitation probability 47.1%
first.org - NIST NVDVulnerability recordCVE-2014-4123
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.
nvd.nist.gov