CVE-2014-1764: Critical severity Microsoft Internet Explorer vulnerability
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging "object confusion" in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1764?
CVE-2014-1764 is considered a critical vulnerability due to its ability to allow remote code execution.
How do I fix CVE-2014-1764?
To mitigate CVE-2014-1764, users should update to the latest version of Internet Explorer or apply any available security patches from Microsoft.
Which versions of Internet Explorer are affected by CVE-2014-1764?
CVE-2014-1764 affects Internet Explorer versions 7 through 11.
Can CVE-2014-1764 be exploited without user interaction?
Yes, CVE-2014-1764 can be exploited by remote attackers without requiring any user interaction.
What type of attack is facilitated by CVE-2014-1764?
CVE-2014-1764 facilitates remote code execution attacks through object confusion in a broker process.