Sploitus

CVE-2014-4113

24 known exploits for CVE-2014-4113

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."

Affected products
Windows, Windows 7, Windows 8, Windows 8.1, Windows Rt, Windows Server 2003, Windows Server 2008, Windows Server 2012
Microsoft Windows 7
All versions
Microsoft Windows 8
All versions
Microsoft Windows 8.1
All versions
Microsoft Windows Rt
All versions
Microsoft Windows Rt 8.1
All versions
Microsoft Windows Server 2003
All versions
Fix
Available
CVSS 3.1
7.8 HIGH
EPSS
87.0% (100th percentile)
NVD status
Analyzed
Published
2014-10-15
CVE-2014-4113 at NVD
Authoritative description, scoring and affected products

24 known exploits for CVE-2014-4113

Proof-of-concept code and exploit modules indexed by Sploitus

cve-2014-4113
2026-08-30 KitPloitKITPLOIT
CVE-2014-4113
2026-08-30 KitPloitKITPLOIT
Exploit-CVE-2014-4113
2026-08-27 KitPloitKITPLOIT
CVE-2014-4113
2026-08-27 KitPloitKITPLOIT
Microsoft Windows 8.1 / Server 2012 - Win32k.sys Local Privilege Escalation (MS14-058) Exploit
2019-05-30 anonymousZDTC
Microsoft Windows Net-NTLMv2 Reflection DCOM/RPC Privilege Escalation
2019-01-16 breenmachinePACKETSTORMRuby
Windows Net-NTLMv2 Reflection DCOM/RPC Exploit
2018-10-06 metasploitZDTRuby
Windows Net-NTLMv2 Reflection DCOM/RPC
2018-10-05 MumbaiPACKETSTORMRuby
Abusing Token Privileges For LPE
2017-08-28 Exploit-DBEXPLOITDB
Microsoft Windows - Kernel 'win32k.sys' Privilege Escalation (MS14-058)
2016-04-05 MWR InfoSecurityZDT
Microsoft Windows Kernel - win32k.sys Local Privilege Escalation (MS14-058)
2016-04-05 MWR InfoSecurityEXPLOITPACK
Microsoft Windows Kernel - 'win32k.sys' Local Privilege Escalation (MS14-058)
2016-04-05 MWR InfoSecurityEXPLOITDB
MS14-058 Windows内核提权漏洞 (CVE-2014-4113)
2016-01-29 SnowflakesSEEBUG
Exploit for CVE-2014-4113
2016-01-22 nsxzGITHUB
Windows 8.0 / 8.1 x64 TrackPopupMenu Privilege Escalation
2015-05-21 Matteo MemelliPACKETSTORMPython
Windows 8.0 - 8.1 x64 TrackPopupMenu Privilege Escalation (MS14-058) Exploit
2015-05-20 ryujinZDTPython
Microsoft Windows 8.08.1 (x64) - TrackPopupMenu Local Privilege Escalation (MS14-058)
2015-05-19 ryujinEXPLOITPACKPython
Microsoft Windows 8.0/8.1 (x64) - 'TrackPopupMenu' Local Privilege Escalation (MS14-058)
2015-05-19 ryujinEXPLOITDBPython
Microsoft Windows 8.1/ Server 2012 - 'Win32k.sys' Local Privilege Escalation (MS14-058)
2014-11-24 anonymousEXPLOITDBC
Windows TrackPopupMenu Win32k NULL Pointer Dereference
2014-11-13 RootSEEBUGRuby
Windows TrackPopupMenu Win32k NULL Pointer Dereference Exploit
2014-10-29 metasploitZDTRuby
Microsoft Windows - TrackPopupMenu Win32k Null Pointer Dereference (MS14-058) (Metasploit)
2014-10-28 MetasploitEXPLOITDBRuby
Windows TrackPopupMenu Win32k NULL Pointer Dereference
2014-10-28 Spencer McIntyrePACKETSTORMRuby
Windows TrackPopupMenu Win32k NULL Pointer Dereference
2014-10-14 Unknown, juan vazquez <juan.vazquez@metasploit.com>, Spencer McIntyre, OJ Reeves <oj@buffered.io>METASPLOITRuby