Loading story…
Microsoft’s security bulletin MS14-029, issued May 13, 2014, addressed two Internet Explorer memory corruption vulnerabilities: CVE-2014-0310 and CVE-2014-1815. The flaws affected Internet Explorer 6 through 11 in the listed configurations and could allow attackers to execute code with the current user’s privileges when a victim viewed specially crafted web content. Microsoft reported limited attacks attempting to exploit CVE-2014-1815, while no exploitation of CVE-2014-0310 had been reported when the bulletin was issued. The update was rated Critical for affected Windows clients and Moderate for affected Windows servers.
MS14-029 corrected Internet Explorer’s handling of objects in memory. Microsoft recommended immediate installation after the applicable cumulative update or prerequisite, noting that MS14-029 itself was not cumulative. Separately, Microsoft’s current Internet Explorer help notice states that IE11 support ended June 15, 2022, and directs users requiring Internet Explorer-compatible sites to IE mode in Microsoft Edge. Organizations retaining legacy browser dependencies should verify historical patch coverage and migrate away from unsupported standalone Internet Explorer.
See which actors are running it and whether you're in range.
5 events from the most recent confirmed update back to the earliest known activity.
Microsoft revised MS14-029 to version 1.2, correcting Internet Explorer 11 update replacement information and announcing a detection-only change to update 2961851. Customers who had already successfully installed the update needed no further action.
Microsoft revised the bulletin to clarify that the applicable cumulative Internet Explorer update must be installed before MS14-029. Installing MS14-029 without the prerequisite could cause compatibility problems, including intermittent browser unresponsiveness.
Microsoft published MS14-029 and released fixes for CVE-2014-0310 and CVE-2014-1815, memory corruption vulnerabilities affecting listed Internet Explorer 6 through 11 configurations. The update corrected object handling in memory, and Microsoft recommended immediate installation after the applicable prerequisites.
Microsoft released the out-of-band Internet Explorer security update MS14-021. Its fixes were subsequently included in MS14-029.
Attackers exploited the Internet Explorer memory corruption vulnerability CVE-2014-1815 in May 2014. Microsoft acknowledged limited attacks attempting to exploit it when issuing MS14-029.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Correlate live exploitation activity against the software you actually run, and see where you're exposed.
3 references tracked. Mallory keeps watching after this page renders.
support.microsoft.com
Open sourcecve.org
Open sourcelearn.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft released security update **3034682** to address **41 vulnerabilities** in Internet Explorer **6 through 11**, including multiple flaws that could allow **remote code execution** if a user visited a specially crafted webpage. The most severe issues could let an attacker run code with the same privileges as the current user, making the risk highest on systems where users have administrative rights. Microsoft rated the bulletin **Critical** for affected Windows client systems and **Moderate** for affected Windows server systems. The bulletin said one flaw, **CVE-2015-0071**, had been exploited in the wild, while **CVE-2014-8967** had been publicly disclosed before the patch was issued. Microsoft said the update corrects memory corruption and permission-validation issues, improves **ASLR** behavior, and strengthens cross-domain policy enforcement. It also noted that systems running Internet Explorer **9, 10, and 11** require updates **3021952** and **3034196** for full protection, with **3023607** and, on some platforms, **3036197** also potentially installed automatically.
Jun 29, 2026
Microsoft released **MS14-080**, a cumulative security update for **Internet Explorer** that addressed 14 privately reported vulnerabilities across **IE 6 through IE 11**. The most severe flaws could allow **remote code execution** if a user visited a specially crafted webpage, with client systems generally rated **Critical** and affected Windows Server configurations rated **Moderate**. The bulletin said the update corrected multiple memory corruption issues, two **XSS filter bypass** flaws, an **ASLR bypass**, and the **VBScript** memory corruption bug tracked as `CVE-2014-6363`. Microsoft also published **MS14-084**, another **Critical** security bulletin, alongside later revisions to the Internet Explorer advisory that required additional updates in some environments, including **3029449** for **IE10** on Windows 8, Windows Server 2012, and Windows RT, and **3038314** for **IE11** on Windows 7 and Windows Server 2008 R2. The combined advisories highlighted urgent patching needs for Microsoft platforms because successful exploitation could let attackers run arbitrary code through user interaction with malicious content.
Aug 15, 2026
Microsoft released security bulletin **MS14-021 (KB2965111)** on May 1, 2014, to fix **CVE-2014-1776**, a use-after-free vulnerability affecting Internet Explorer 6 through 11. A specially crafted webpage could execute arbitrary code with the current user's privileges, potentially enabling complete system compromise if the user had administrative rights. Exploitation was observed in April 2014, with Microsoft reporting limited, targeted attacks and a referenced FireEye report identifying attacks against Internet Explorer 9 through 11. Microsoft rated the flaw Critical on affected Windows clients and Moderate on affected Windows servers; NIST's reference listing also links to CISA's Known Exploited Vulnerabilities Catalog. The update corrects Internet Explorer's handling of objects in memory, but is **not cumulative**: administrators must install applicable preceding cumulative updates and select the appropriate Internet Explorer 11 package based on installed prerequisites. Microsoft recommended immediate installation and documented interim mitigations including EMET 4.0 or 4.1, Enhanced Protected Mode with 64-bit processes, restricted browser security settings, and unregistering VGX.DLL. The vulnerable function is CMarkup::IsConnectedToPrimaryMarkup, not code within VGX.DLL; disabling that library blocks known exploit techniques rather than fixing the underlying vulnerability.
Oct 9, 2026