Live › vulnerability › CVE-2014-1776
Go to dashboardMicrosoft Internet Explorer has a memory corruption flaw that lets a remote attacker run code as the current user. Attackers are exploiting it in the wild, and CISA lists it in its Known Exploited Vulnerabilities catalog.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Internet Explorer | vendor | – | – |
Check which Internet Explorer version is installed and whether Microsoft's 2014 security update for it is applied; the sources do not give a command.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014. NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that "VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks."
This page as .md · .json · in your agent: get_signal("CVE-2014-1776")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.