Search/CVE-2014-5307
● CVE

CVE-2014-5307

VendorpandasecurityProductpanda av pro 2014, panda global protection 2014, panda internet security 2014DiscoveredAug 26, 2014UpdatedMay 6, 2026

Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted argument to a 0x222008 IOCTL call.

CVSS v3.1
—
EPSS
0.57%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
4 relationships
Timeline
disclosure → media coverage
Aug 26, 2014
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026