CVE-2014-0315

CVE-2014-0315 is an untrusted search path vulnerability affecting multiple versions of Microsoft Windows, including XP, Vista, Windows 7, 8, and Server editions. This flaw allows a local attacker to elevate privileges by placing a malicious cmd.exe file in a directory containing a batch script, which is then executed instead of the legitimate system command. With a CVSS score of 6.9, this vulnerability is considered high severity due to its local attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its potential impact, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.