Microsoft Windows: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

Who cares

internet-explorer, internet-facing-browsing-hosts, ole, windows

Not affected if

fully-patched-windows, no-ie-browsing, patched-kb3006226

1. CISA KEV2026-10-23 19:11 UTC · published 2022-03-25 00:00 UTC · CVE-2014-6332
2. EPSS2026-10-23 19:13 UTC · CVE-2014-6332
3. InfraStack analyst2026-10-23 21:23 UTC · published 2026-10-23 21:23 UTC
   “Read MS14-064 bulletin (primary). Fix is KB3006226 for CVE-2014-6332; KB3010788 is the separate CVE-2014-6352 fix. KEV page linked but not read in detail. No PoC link verified. Bulletin said not exploited at release; KEV later lists it as exploited.”
4. NVD2026-10-23 21:57 UTC · published 2014-11-11 22:55 UTC · CVE-2014-6332

Each row is the first time that source carried this signal. The analyst’s rows are its own findings.

• CISA KEV: CVE-2014-6332 · 10-23 19:11
• EPSS: CVE-2014-6332 · 10-23 19:13
• NVD: CVE-2014-6332 · 10-23 21:57
• Microsoft Security Bulletin MS14-064Advisory · InfraStack analyst
• CISA KEV entry CVE-2014-6332Mentions it · InfraStack analyst

This page as .md · .json · in your agent: get_signal("CVE-2014-6332")

CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.