CVE-2014-4148
Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
Vulnerability Description
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka "TrueType Font Parsing Remote Code Execution Vulnerability."
Affected Platforms (CPE)
💻
Microsoft
Windows 7
All versions💻
Microsoft
Windows 8
All versions💻
Microsoft
Windows 8.1
All versions💻
Microsoft
Windows Rt
All versions💻
Microsoft
Windows Rt 8.1
All versions💻
Microsoft
Windows Server 2003
All versions💻
Microsoft
Windows Server 2008
All versions💻
Microsoft
Windows Server 2008
= r2💻
Microsoft
Windows Server 2012
All versions💻
Microsoft
Windows Server 2012
= r2💻
Microsoft