CISA/NIST NVD Alert - CVE-2014-4148

Windows - Microsoft Windows Remote Code Execution Vulnerability

CISA/NIST Known Exploited Vulnerability Alert

CVE Identification Number

CVE-2014-4148

Vendor Name

Microsoft

Product

Windows

Vulnerability Name

Microsoft Windows Remote Code Execution Vulnerability

Description of Vulnerability

A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.

Date Added to CISA Known Exploited Vulnerability Database

2022-05-25

Remediation

Apply updates per vendor instructions.

Link to NIST NVD CVE Listing

National Vulnerability Database Source