CVE-2014-4074 — Microsoft Windows Server 2012 vulnerability

CWE-2645 documents4 sources
Severity
7.2HIGHNVD
EPSS
1.7%
top 17.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows Server 2012
Timeline
PublishedSep 10
Latest updateMay 14

Description

The Task Scheduler in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via an application that schedules a crafted task, aka "Task Scheduler Vulnerability."

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-4gqq-g5c6-7hqg: The Task Scheduler in Microsoft Windows 8, Windows 8↗2022-05-14
▶

💥Exploits & PoCs

1
Exploit-DB
Wireshark CAPWAP Dissector - Denial of Service (Metasploit)↗2014-05-28
▶

🕵️Threat Intelligence

2
Talos
Microsoft Update Tuesday September 2014: another generally light month but with a significant IE bulletin↗2014-09-09
▶
Talos
Microsoft Update Tuesday September 2014: another generally light month but with a significant IE bulletin↗2014-09-09
▶