CVE-2018-0824 Microsoft Windows
Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.
- CVSS
- not scored
On CISA’s exploited list
Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
- Added
- 2024-08-05
- Federal patch deadline
- 2024-08-26
- Ransomware use
- not known