AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-4073

HIGH · CVSS 10 EPSS 23.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-10-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-4073
Severity
HIGH
CVSS
10
EPSS
23.43%
Microsoft

Original NVD Description

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."