CVE-2014-0254

no score yetEPSS 33%

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service (system hang) via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 (IPv6) Denial of Service Vulnerability."

EPSS: 33% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2014-02-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_8
microsoft:windows_rt
microsoft:windows_server_2012

References

http://osvdb.org/103159
http://secunia.com/advisories/56775
http://www.securityfocus.com/bid/65409
http://www.securitytracker.com/id/1029747
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-006

Check your stack JSON