Back to CVE Browser

CVE-2014-4114

Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score95.6940%

EPSS Percentile95.60th

PublishedOct 15, 2014

Last ModifiedApr 22, 2026

Vulnerability Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document, as exploited in the wild with a "Sandworm" attack in June through October 2014, aka "Windows OLE Remote Code Execution Vulnerability."

Affected Platforms (CPE)

💻

Microsoft

Windows 7

All versions

💻

Microsoft

Windows 8

All versions

💻

Microsoft

Windows 8.1

All versions

💻

Microsoft

Windows Rt

All versions

💻

Microsoft

Windows Rt 8.1

All versions

💻

Microsoft

Windows Server 2008

All versions

💻

Microsoft

Windows Server 2008

= r2

💻

Microsoft

Windows Server 2012

All versions

💻

Microsoft

Windows Server 2012

= r2

💻

Microsoft

Windows Vista

All versions

References & Advisories

🔗 http://blog.trendmicro.com/trendlabs-security-intelligence/an-analysis-of-windows-zero-day-vulnerability-cve-2014-4114-aka-sandworm/

🔗 http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx

🔗 http://osvdb.org/show/osvdb/113140

🔗 http://secunia.com/advisories/60972

🔗 http://www.exploit-db.com/exploits/35019

🔗 http://www.exploit-db.com/exploits/35020

🔗 http://www.exploit-db.com/exploits/35055

🔗 http://www.isightpartners.com/2014/10/cve-2014-4114/

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...