Skip to content
skopnix
Dossier · Vulnerability

Vulnerability · NVD published 2014-11-11

CVE-2014-4076

Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."

  1. First PoC
  2. 4101 days →Metasploit
  3. 178 days →First cited attacker

Signals

Exploited in the wild
Not on KEVNot in CISA's catalogue as of the last daily pull. Absence is not proof of safety.
EPSS · 30-day forecast
23%Chance of exploitation in the next 30 days, 98th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD
7.2AV:L/AC:L/Au:N/C:C/I:C/A:C
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

3 known · links only

Metasploit1

  1. MS14-070 Windows tcpip!SetAddrOptions NULL Pointer Dereference ↗

    A vulnerability within the Microsoft TCP/IP protocol driver tcpip.sys can allow a local attacker to trigger a NULL pointer dereference by using a specially crafted IOCTL. This flaw can be abused to elevate privileges to SYSTEM.

    ruby · seen 2026-10-18

Exploit-DB2

  1. Microsoft Windows Server 2003 SP2 - Local Privilege Escalation (MS14-070) ↗

    created 2015-01-29

  2. Microsoft Windows Server 2003 SP2 - TCP/IP IOCTL Privilege Escalation (MS14-070) ↗

    created 2015-08-12

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.