CVE-2014-2783 — Microsoft Internet Explorer 7 through 11 does not prevent use of wildcard EV SSL certificates, which might allow remote attackers to spoof a trust level by leveraging improper issuance of a wildcard certificate by a recognized Certification Authority, aka "Extended Validation (EV) Certificate Security Feature Bypass Vulnerability."

Back Back to CVE browser

MEDIUM

Microsoft Internet Explorer 7 through 11 does not prevent use of wildcard EV SSL certificates, which might allow remote attackers to spoof a trust level by leveraging improper issuance of a wildcard certificate by a recognized Certification Authority, aka "Extended Validation (EV) Certificate Security Feature Bypass Vulnerability."

Published Jul 8, 2014

6.4

MEDIUM

CVSS 2.0

EPSS 8.62%

Description

Microsoft Internet Explorer 7 through 11 does not prevent use of wildcard EV SSL certificates, which might allow remote attackers to spoof a trust level by leveraging improper issuance of a wildcard certificate by a recognized Certification Authority, aka "Extended Validation (EV) Certificate Security Feature Bypass Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Metrics

8.62% 0.08622

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.08622

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	8.62% (0.08622)	94.94th	v5 (v2026.06.15)
Jun 15, 2026	8.62% (0.08622)	94.38th	v5 (v2026.06.15)
Mar 30, 2025	7.75% (0.07745)	91.12th	v4 (v2025.03.14)
Mar 29, 2025	13.44% (0.13445)	90.32th	v4 (v2025.03.14)
Mar 17, 2025	7.75% (0.07752)	91.33th	v4 (v2025.03.14)
Dec 12, 2024	0.99% (0.00989)	84.20th	v3 (v2023.03.01)
May 20, 2024	0.99% (0.00989)	83.49th	v3 (v2023.03.01)
Feb 8, 2024	0.70% (0.00699)	79.64th	v3 (v2023.03.01)
Mar 7, 2023	0.70% (0.00699)	77.19th	v3 (v2023.03.01)
Mar 6, 2023	29.55% (0.29551)	97.42th	v2 (v2022.01.01)
Feb 6, 2022	29.55% (0.29551)	96.23th	v2 (v2022.01.01)
Feb 4, 2022	27.65% (0.27647)	95.91th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (4)

http://secunia.com/advisories/59775
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/68391
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1030532
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-037
vendor-advisoryx_refsource_MS

Link	Providers	Tags
http://secunia.com/advisories/59775		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/68391		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1030532		vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-037		vendor-advisoryx_refsource_MS

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jul 8, 2014

Updated Aug 6, 2024

Reserved Apr 10, 2014

Link CVE-2014-2783

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2014-2783

Red Hat

Severity n/a

Public date n/a

Links CVE-2014-2783