Back

CVE-2014-4148

HIGH CISA KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka "TrueType Font Parsing Remote Code Execution Vulnerability."

Published: Oct 15, 2014 Modified: Apr 22, 2026
CWE-94 CWE-94

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: REQUIRED Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products (11)

Vendor Product Version
microsoft windows_7 -
microsoft windows_8 -
microsoft windows_8.1 -
microsoft windows_rt -
microsoft windows_rt_8.1 -
microsoft windows_server_2003 -
microsoft windows_server_2008 -
microsoft windows_server_2008 r2
microsoft windows_server_2012 -
microsoft windows_server_2012 r2
microsoft windows_vista -

GitHub Security Advisory GHSA-4wxx-xmrx-3xq9

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...

Risk Scores

CVSS Score 8.8 / 10
EPSS Score 50.70%

Top 1% most likely to be exploited

Threat Score 80.4 / 100

CISA Known Exploited

Date Added: 2022-05-25
Due Date: 2022-06-15
Required Action:

Apply updates per vendor instructions.

Data Sources

NVD CISA KEV EPSS GitHub