CVE-2014-6332 CVE-2014-6332

漏洞描述

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka "Windows OLE Automation Array Remote Code Execution Vulnerability."

影响产品

微软公司Windows-Server-2003查看产品 →微软公司Windows-Server-2008查看产品 →微软公司Windows-Server-2012查看产品 →微软公司Windows-8.1查看产品 →微软公司Windows-8查看产品 →微软公司Windows-Vista查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
remote_registry_access_check Remote Registry Service Disabled Check Microsoft-Windows-Business-Server Windows Server Windows+14	中危	—	—	PoCEXP	2025/08/01
hard_disk_default_share Hard Disk Default Share Removal Check Microsoft-Windows-Business-Server IIS Windows Server+8	中危	—	—	PoCEXP	2025/08/01
CVE-2020-13699RCE CVE-2020-13699 Windows Server Windows Windows7+10	高危	8.8	74.6%	PoCEXP	2020/07/29
CVE-2018-3991RCE CVE-2018-3991 Windows Server Windows Windows7+10	严重	9.8	71.1%	PoCEXP	2019/02/05
CVE-2018-4990RCE CVE-2018-4990 Microsoft-Windows-Business-Server Windows Server Windows+14	高危	8.8	60.1%	PoCEXP	2018/07/09
CVE-2018-4878RCE CVE-2018-4878 Windows Server Windows Windows7+9	严重	9.8	93.3%	PoCEXP	2018/02/06

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞