CVE-2012-0158 Microsoft MSCOMCTL.OCX
Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.
- CVSS
- not scored
On CISA’s exploited list
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- known
Actors known to use it (MITRE ATT&CK)
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- BITTERT-APT-17 · 16 techniques
- admin@338China · 12 techniques
- Transparent TribePakistan · COPPER FIELDSTONE, APT36, Mythic Leopard · 12 techniques
- BlackTechChina · Palmerworm · 10 techniques
- Aoqin DragonChina · 9 techniques
- APT12China · IXESHE, DynCalc, Numbered Panda · 5 techniques