CVE-2014-4113: Microsoft Win32k Privilege Escalation Vulnerability
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."
Other sources
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What systems are affected by CVE-2014-4113?
CVE-2014-4113 affects Microsoft Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows 8, Windows 8.1, Windows Server 2012, and Windows RT.
What is the security impact of CVE-2014-4113?
CVE-2014-4113 allows local users to gain elevated privileges by executing crafted programs on the affected systems.
How can I mitigate CVE-2014-4113?
Mitigation for CVE-2014-4113 is achieved by applying the appropriate security updates provided by Microsoft.
What is the recommended action for CVE-2014-4113?
The recommended action for CVE-2014-4113 is to install the latest security patches from Microsoft for the affected operating systems.
Is there a workaround for CVE-2014-4113 while awaiting a fix?
There currently are no official workarounds listed for CVE-2014-4113, so applying security updates is the best mitigation.