CVE-2014-4076

CVE-2014-4076 is a local privilege escalation vulnerability affecting Microsoft Windows Server 2003 SP2, allowing attackers to gain elevated privileges through crafted IOCTL calls to tcpip.sys or tcpip6.sys. With a CVSS score of 7.2, this vulnerability is critical, requiring local access but having low attack complexity to achieve complete compromise of confidentiality, integrity, and availability. While not on the CISA KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating a high potential for exploitation, though there is no evidence of active exploitation or significant community discussion.