CVE-2014-6352: Microsoft Windows Code Injection Vulnerability. Microsoft

Microsoft Windows Code Injection Vulnerability. Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.

• CISA KEV-listed (remediation due 2022-08-25)
• EPSS 77.6% (99.5% percentile)
• CVSS 7.8 high

Exploiting malware & tools

• AutoIt backdoor

Linked threat actors

• QUILTED TIGER machine-inferred link
• Patchwork machine-inferred link
• APT33 machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions