{"metadata": {"vulnerability": "CVE-2014-6352", "count": 66, "kinds": {"milestone": 4, "sighting": 31, "kev": 11, "other": 20}}, "data": [{"timestamp": "2014-09-11T00:00:00Z", "date_only": false, "value": "2014-09-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2014-6352", "field": "cveMetadata.dateReserved"}, {"timestamp": "2014-10-20T00:00:00Z", "date_only": false, "value": "2014-10-20T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/35020", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "712820f4-2e1e-4d52-bc04-914bb2db9563", "url": "https://www.exploit-db.com/exploits/35020"}, {"timestamp": "2014-10-21T00:00:00Z", "date_only": false, "value": "2014-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2014-6352", "field": "containers.cna.datePublic"}, {"timestamp": "2014-10-22T00:00:00Z", "date_only": false, "value": "2014-10-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2014-ALE-009", "record": "CERTFR-2014-ALE-009", "field": "revisions.0.revision_date"}, {"timestamp": "2014-10-22T14:00:00Z", "date_only": false, "value": "2014-10-22T14:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2014-6352", "field": "cveMetadata.datePublished"}, {"timestamp": "2014-10-22T14:55:00Z", "date_only": false, "value": "2014-10-22T14:55:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HCJ8-R3VF-4JR7", "record": "GHSA-HCJ8-R3VF-4JR7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2014-10-22T14:55:00Z", "date_only": false, "value": "2014-10-22T14:55Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2014-6352", "record": "GSD-2014-6352", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2014-10-22T14:55:06.247Z", "date_only": false, "value": "2014-10-22T14:55:06.247", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2014-6352", "record": "FKIE_CVE-2014-6352", "field": "published"}, {"timestamp": "2014-10-28T09:39:41Z", "date_only": false, "value": "2014-10-28T09:39:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/544f6415-0364-486b-ac0e-4fe6950d210b", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "ff68a79e-5ea9-45d0-86b8-aea2879f08b4"}, {"timestamp": "2014-11-12T00:00:00Z", "date_only": false, "value": "2014-11-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2014-ALE-009", "record": "CERTFR-2014-ALE-009", "field": "revisions.1.revision_date"}, {"timestamp": "2014-11-12T00:00:00Z", "date_only": false, "value": "2014-11-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2014-AVI-464", "record": "CERTFR-2014-AVI-464", "field": "revisions.0.revision_date"}, {"timestamp": "2014-11-13T08:13:18Z", "date_only": false, "value": "2014-11-13T08:13:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/54646762-aac0-4921-87b2-1c4a950d210b", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "4a0c706e-cdd5-477f-8634-f5bf6ccdf0f3"}, {"timestamp": "2014-11-14T00:00:00Z", "date_only": false, "value": "2014-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/35235", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "076f9538-798f-4472-a5a3-1f40777fbfab", "url": "https://www.exploit-db.com/exploits/35235"}, {"timestamp": "2014-11-14T00:00:00Z", "date_only": false, "value": "2014-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/35236", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "ae75f130-2fbd-415e-be41-c9291a58b58a", "url": "https://www.exploit-db.com/exploits/35236"}, {"timestamp": "2014-11-19T14:34:01Z", "date_only": false, "value": "2014-11-19T14:34:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/546ca820-87f8-4248-a6c0-952f950d210b", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "827d7693-063b-4657-b73d-74858249ab63"}, {"timestamp": "2014-12-15T09:02:20Z", "date_only": false, "value": "2014-12-15T09:02:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/548ea354-bd2c-4db8-a984-400a950d210b", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "a8df40b0-3a3f-4581-959d-5af4055bb584"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_064_packager_python.rb", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "7e775a4b-1a82-428f-a404-4a5fd1f686f2", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_064_packager_python.rb"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_064_packager_run_as_admin.rb", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "612b0f93-372b-47a9-8b7e-42a820a704e3", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_064_packager_run_as_admin.rb"}, {"timestamp": "2018-10-12T19:57:01Z", "date_only": false, "value": "2018-10-12T19:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2014-6352", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-10-12T22:07:00Z", "date_only": false, "value": "2018-10-12T22:07Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2014-6352", "record": "GSD-2014-6352", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2019-06-18T06:53:33Z", "date_only": false, "value": "2019-06-18T06:53:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Pen7esting/209", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "d9893ce1-455d-46ae-8239-c72c61370cdf", "content": "[PoC] 2010~2018 MS Office 0-day/1-day exploit-case-study#OpenXMLTag#RTF#ActiveX#UAF#TIFF#EPS#Moniker\n\nCVE-2010-3333\nCVE-2014-1761\nCVE-2016-7193\nCVE-2015-1641\nCVE-2017-11826\nCVE-2012-0158\nCVE-2012-1856\nCVE-2015-1642\nCVE-2014-6352\nCVE-2015-0097https://t.co/MHJ5xtGSKZ\u2014 Jin Wook (@wugeej) June 14, 2019", "url": "https://t.me/Pen7esting/209"}, {"timestamp": "2020-10-09T14:10:16Z", "date_only": false, "value": "2020-10-09T14:10:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f1b31e3b-033e-4e0f-91b1-ac34f900a53f", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "c0237916-275b-4e30-b30b-7d1de234a096"}, {"timestamp": "2020-10-09T14:26:46Z", "date_only": false, "value": "2020-10-09T14:26:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c100e80e-5a26-4a63-941c-6e7ac03114c1", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "0fc1afb4-89ff-46bc-b7c5-9a4e6a258c86"}, {"timestamp": "2020-10-09T16:35:58Z", "date_only": false, "value": "2020-10-09T16:35:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/21b8cf94-f9f1-467a-9b17-5328dd7dcdf3", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "b52e104a-63d2-4582-a302-424c28892ae0"}, {"timestamp": "2020-10-09T16:48:54Z", "date_only": false, "value": "2020-10-09T16:48:54.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cc5c41b3-1c1e-4d6e-a546-c1a7718907a3", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "4ee8edf0-ea6c-4603-92e0-18681458ccf4"}, {"timestamp": "2020-10-09T17:15:36Z", "date_only": false, "value": "2020-10-09T17:15:36.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3eece7fb-11c4-4dc8-b867-fbdbf63b4ebd", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "13ce7e66-f9a5-4a2f-ba98-ae6899a79a6f"}, {"timestamp": "2020-10-09T17:35:27Z", "date_only": false, "value": "2020-10-09T17:35:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ccefe4b8-af5e-4483-9613-f9579dc29446", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "7b43690e-4ac8-42df-a071-c8d131c5733c"}, {"timestamp": "2020-11-06T15:49:21Z", "date_only": false, "value": "2020-11-06T15:49:21.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/36b8470b-ace9-416e-9994-ca272e4e6f1e", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "1bd95956-84b5-4d39-bc0d-4142eccf8b37"}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2014-6352", "field": "timestamps.asserted_at", "uuid": "61a8437c-8706-4895-a4f4-06f913e5b07a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2014-6352", "field": "timestamps.asserted_at", "uuid": "0714e7b3-f0eb-4adf-ac3a-c3d18cfac936", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": true, "value": "2022-02-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2014-6352", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": true, "value": "2022-02-25", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2014-6352", "record": "GSD-2014-6352", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2014-6352", "field": "evidence.0.details.added_date", "uuid": "0714e7b3-f0eb-4adf-ac3a-c3d18cfac936", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": true, "value": "2022-02-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2014-6352", "field": "evidence.0.details.date_added", "uuid": "61a8437c-8706-4895-a4f4-06f913e5b07a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2014-6352", "field": "timestamps.first_seen_at", "uuid": "61a8437c-8706-4895-a4f4-06f913e5b07a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2014-6352", "field": "timestamps.first_seen_at", "uuid": "0714e7b3-f0eb-4adf-ac3a-c3d18cfac936", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2014-6352", "field": "status.status_updated_at", "uuid": "61a8437c-8706-4895-a4f4-06f913e5b07a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2014-6352", "field": "status.status_updated_at", "uuid": "0714e7b3-f0eb-4adf-ac3a-c3d18cfac936", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2014-6352", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-05-14T02:30:14Z", "date_only": false, "value": "2022-05-14T02:30:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HCJ8-R3VF-4JR7", "record": "GHSA-HCJ8-R3VF-4JR7", "field": "published"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2014-6352", "field": "evidence.0.details.due_date", "uuid": "61a8437c-8706-4895-a4f4-06f913e5b07a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2014-6352", "record": "GSD-2014-6352", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2023-06-14T21:10:03Z", "date_only": false, "value": "2023-06-14T21:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "3a014fee-0a10-4ed0-be85-cf02cb365632"}, {"timestamp": "2023-12-04T19:05:38Z", "date_only": false, "value": "2023-12-04T19:05:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/arpsyndicate/1281", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "70607fa7-f729-4fcb-80e0-ddfb5c19c678", "content": "#ExploitObserverAlert\n\nCVE-2014-6352\n\nDESCRIPTION: Exploit Observer has 14 entries related to CVE-2014-6352. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the wild in October 2014 with a crafted PowerPoint document.\n\nFIRST-EPSS: 0.969110000\nNVD-IS: 10.0\nNVD-ES: 8.6", "url": "https://t.me/arpsyndicate/1281"}, {"timestamp": "2023-12-13T01:22:50.765Z", "date_only": false, "value": "2023-12-13T01:22:50.765438Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2014-6352", "record": "GSD-2014-6352", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-06T12:10:13.396Z", "date_only": false, "value": "2024-08-06T12:10:13.396Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2014-6352", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:26:42.875Z", "date_only": false, "value": "2024-12-24T20:26:42.875141Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971264", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "37b1e443-9a96-4241-bd21-86bafbc815ac", "url": "https://feedsin.space/feed/CISAKevBot/items/2971264"}, {"timestamp": "2025-02-06T03:13:42Z", "date_only": false, "value": "2025-02-06T03:13:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "6d78ee61-0fbf-4ab2-b6a6-a8c3f9e0aa96"}, {"timestamp": "2025-02-10T19:28:28.151Z", "date_only": false, "value": "2025-02-10T19:28:28.151742Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2014-6352", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-10T19:28:28.151Z", "date_only": false, "value": "2025-02-10T19:28:28.151742Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2014-6352", "record": "FKIE_CVE-2014-6352", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:06Z", "date_only": false, "value": "2025-02-23T02:10:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "c193e0fd-81c0-409a-818a-09d7357b4016"}, {"timestamp": "2025-02-23T04:09:31Z", "date_only": false, "value": "2025-02-23T04:09:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "0a2b2432-b6c6-4e48-8adf-e6805e9a2e38"}, {"timestamp": "2025-08-31T03:00:57Z", "date_only": false, "value": "2025-08-31T03:00:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "907727d5-288b-486d-875b-a2b2b30ab8d1"}, {"timestamp": "2025-08-31T03:12:43Z", "date_only": false, "value": "2025-08-31T03:12:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "0ea565e6-9cae-4952-866f-2a1ee8f957df"}, {"timestamp": "2025-10-22T00:05:34.995Z", "date_only": false, "value": "2025-10-22T00:05:34.995Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2014-6352", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:05:34.995Z", "date_only": false, "value": "2025-10-22T00:05:34.995Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2014-6352", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T03:30:41Z", "date_only": false, "value": "2025-10-22T03:30:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HCJ8-R3VF-4JR7", "record": "GHSA-HCJ8-R3VF-4JR7", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2014-6352", "field": "timestamps.recorded_at", "uuid": "61a8437c-8706-4895-a4f4-06f913e5b07a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:28:22.414Z", "date_only": false, "value": "2026-02-02T12:28:22.414081Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/61a8437c-8706-4895-a4f4-06f913e5b07a", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "e2cf2d74-57d7-43ae-bc4d-4a4fcf787e0e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/61a8437c-8706-4895-a4f4-06f913e5b07a"}, {"timestamp": "2026-06-17T00:12:57.463Z", "date_only": false, "value": "2026-06-17T00:12:57.463", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2014-6352", "record": "FKIE_CVE-2014-6352", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:37.401Z", "date_only": false, "value": "2026-06-19T12:47:37.401359Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2c4c3099-11a1-4b29-a6f0-371ab502b18a", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "2a72a700-1a5d-4f35-9463-b2ede20aaf88", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2c4c3099-11a1-4b29-a6f0-371ab502b18a"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2014-6352", "field": "timestamps.recorded_at", "uuid": "0714e7b3-f0eb-4adf-ac3a-c3d18cfac936", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:57.855Z", "date_only": false, "value": "2026-06-23T14:04:57.855266Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0714e7b3-f0eb-4adf-ac3a-c3d18cfac936", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "8e0c8cb9-8a76-40bb-89ea-31f232bf82ac", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0714e7b3-f0eb-4adf-ac3a-c3d18cfac936"}, {"timestamp": "2026-07-12T22:00:18.569Z", "date_only": false, "value": "2026-07-12T22:00:18.569847Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/5749", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "61e9de60-f93e-4ef0-ac2e-dd7901a06375", "content": "\ud83c\uddf2\ud83c\uddfe Malasia ha advertido de la sucesi\u00f3n de varios ciberataques a funcionarios de su gobierno y se\u00f1alan como responsables al grupo de crackers chinos APT40. El comunicado ha sido emitido por el Equipo de Respuesta ante Emergencias Inform\u00e1ticas (MyCERT) de Malasia.\nEl objetivo de los ciberataques ha sido infectar los equipos de los funcionarios gubernamentales con malware para luego robar documentos confidenciales.\nSeg\u00fan MyCERT, la metodolog\u00eda de los ataques consist\u00eda en el phishing dirigido (spear phising); los crackers enviaban correos maliciosos a los funcionarios fingiendo ser periodistas o representantes de ONG's, asociaciones militares o de publicaciones comerciales. Esos correos conten\u00edan enlaces a documentos almacenados en Google Drive. Al abrir los documentos, estos ped\u00edan al usuario habilitar las macros y entonces una macro maliciosa explotaba dos vulnerabilidades de Microsoft Office (CVE-2014-6352 y CVE-2017-0199) para descargar e instalar el malware en el equipo de la v\u00edctima.\nhttp://pygy.co/CgP\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\nM\u00e1s sobre el spear phishing: http://pygy.co/CgR\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\nWeb de MyCERT: https://www.mycert.org.my/\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "url": "https://t.me/pleyades_it/5749"}, {"timestamp": "2026-07-14T00:00:48.713Z", "date_only": false, "value": "2026-07-14T00:00:48.713732Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pleyades_it/5749", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "a727bd99-8fd6-4179-aba8-36b532c04fe6", "content": "\ud83c\uddf2\ud83c\uddfe Malasia ha advertido de la sucesi\u00f3n de varios ciberataques a funcionarios de su gobierno y se\u00f1alan como responsables al grupo de crackers chinos APT40. El comunicado ha sido emitido por el Equipo de Respuesta ante Emergencias Inform\u00e1ticas (MyCERT) de Malasia.\nEl objetivo de los ciberataques ha sido infectar los equipos de los funcionarios gubernamentales con malware para luego robar documentos confidenciales.\nSeg\u00fan MyCERT, la metodolog\u00eda de los ataques consist\u00eda en el phishing dirigido (spear phising); los crackers enviaban correos maliciosos a los funcionarios fingiendo ser periodistas o representantes de ONG's, asociaciones militares o de publicaciones comerciales. Esos correos conten\u00edan enlaces a documentos almacenados en Google Drive. Al abrir los documentos, estos ped\u00edan al usuario habilitar las macros y entonces una macro maliciosa explotaba dos vulnerabilidades de Microsoft Office (CVE-2014-6352 y CVE-2017-0199) para descargar e instalar el malware en el equipo de la v\u00edctima.\nhttp://pygy.co/CgP\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\nM\u00e1s sobre el spear phishing: http://pygy.co/CgR\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\nWeb de MyCERT: https://www.mycert.org.my/\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "url": "https://t.me/pleyades_it/5749"}, {"timestamp": "2026-07-29T12:01:37.726Z", "date_only": false, "value": "2026-07-29T12:01:37.726215Z", "kind": "sighting", "label": "Seen", "source": "Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJ_k2WzpXql3KPPBgA", "record": "CVE-2014-6352", "field": "creation_timestamp", "uuid": "64568484-252e-4d3e-b90e-2f624ac3c546"}]}