EXPOSURES › CVE-2014-1776
CVE-2014-1776
HIGH ⌖ ON CISA KEV · EXPLOITEDA memory corruption flaw in Internet Explorer allowed remote attackers to execute code as the current user.
This unpatched vulnerability was actively exploited in the wild, enabling remote code execution without requiring a zero-day exploit. DIB organizations must ensure legacy browsers are patched or disabled, as reliance on unpatched software violates CMMC/NIST 800-171 requirements for timely patching and vulnerability management.
Shame score — Microsoft failed to patch a known memory corruption vulnerability for years, allowing it to be actively exploited in the wild, which demonstrates severe negligence and avoidable risk.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.
"Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user."
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |