CVE-2014-2777

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2014-1778.

Published: Jun 11, 2014
Updated: Nov 9, 2025
CVE: CVE-2014-2777
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-94

Affected Software
References

Software	From	Fixed in
microsoft / internet_explorer	10	10.x
microsoft / internet_explorer	8	8.x
microsoft / internet_explorer	11	11.x
microsoft / internet_explorer	9	9.x

http://www.securityfocus.com/archive/1/532799/100/0/threaded
http://www.securityfocus.com/bid/67892
http://www.securitytracker.com/id/1030370
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035

Vulnerability Database

CVE-2014-2777

Deep Security Visibility Without the Complexity