H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2024-08-05
Last seen2024-08-05

Confidence

—

Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.

Labels

exploitedkev

CISA KEV context

Vendor / productMicrosoft Windows
Added2024-08-05
Due date2024-08-26
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2018-0824
open
cwe
CWE-502
open