EXPOSURES › CVE-2014-1761
CVE-2014-1761
HIGH ⌖ ON CISA KEV · EXPLOITEDA memory corruption flaw in Microsoft Word allowed remote code execution and was actively exploited in the wild.
Microsoft Word contained a memory corruption vulnerability enabling remote code execution, which was actively exploited in the wild. DIB organizations must ensure all Office applications are patched to prevent attackers from executing arbitrary code on their systems. This failure highlights the risk of relying on unpatched software, even from trusted vendors.
Shame score — A known memory corruption vulnerability in a widely used application was actively exploited in the wild, demonstrating the severe consequences of unpatched software and the ongoing threat of remote code execution attacks.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
"Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution."
"Most CVEs don't matter. Know the ones that do."
"CVE, short for Common Vulnerabilities and Exposures, is a list of publicly disclosed computer security flaws."
"Microsoft September 2026 Patch Tuesday fixes nearly a thousand flaws, including two major zero-days"
"GitHub - cisagov/kev-data: Mirror of cisa.gov/kev data files"
"LIVE 36632 tracked 347 threat actors 8 attack methods updated September 12, 2026"
"CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check"
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |