CVE-2014-2817VulnerabilityPublished 05/25/2022Updated 10/24/2026
CVE-2014-2817: Microsoft Internet Explorer Privilege Escalation Vulnerability
Affects Microsoft Internet ExplorerSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 05/25/2022
- KEV deadline
- 06/15/2022
- EPSS
- 26.3% chance of exploitation in 30 days – higher than 98% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2014-2817 is a high-severity privilege escalation vulnerability in Microsoft Internet Explorer. It allows remote attackers to gain elevated privileges by tricking users into visiting a crafted website. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.