CVE-2014-2817

A privilege escalation vulnerability in Internet Explorer allowed remote attackers to gain elevated privileges via a crafted website.

This unpatched vulnerability in Microsoft Internet Explorer enabled remote attackers to escalate privileges, representing a significant compliance risk for organizations still relying on legacy browsers. DIB organizations must ensure all legacy software is patched or replaced to avoid exploitation and maintain NIST 800-171 compliance. The vulnerability was actively exploited in the wild, highlighting the dangers of neglecting known CVEs.

Shame score — Microsoft failed to patch a known privilege escalation vulnerability in Internet Explorer, which was actively exploited in the wild, demonstrating negligence and a failure to protect users from well-known threats.