Microsoft COM for Windows Remote Code Execution Vulnerability

🗓️ 08 May 2018 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 28 Views

A remote code execution vulnerability exists in Microsoft COM for Windows when it fails to properly handle serialized objects

Reporter	Title	Published	Views	Family All 55
0day.today	Microsoft COM for Windows - Privilege Escalation Exploit	19 Jun 201800:00	–	zdt
ATTACKERKB	CVE-2018-0824	9 May 201800:00	–	attackerkb
Circl	CVE-2018-0824	15 Jun 201822:35	–	circl
CISA KEV Catalog	Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability	5 Aug 202400:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	5 Aug 202412:00	–	cisa
CNVD	Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-10992)	9 May 201800:00	–	cnvd
CVE	CVE-2018-0824	9 May 201819:00	–	cve
Cvelist	CVE-2018-0824	9 May 201819:00	–	cvelist
Exploit DB	Microsoft COM for Windows - Privilege Escalation	18 Jun 201800:00	–	exploitdb
exploitpack	Microsoft COM for Windows - Privilege Escalation	18 Jun 201800:00	–	exploitpack

Vulners

Node

microsoft windows_server,_version_1709_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

08 May 2018 07:00Current

8.3High risk

Vulners AI Score8.3

CVSS 25.1

CVSS 3.17.5 - 8.8

CVSS 37.5

EPSS0.91514

SSVC

microsoft com windows remote code execution vulnerability serialized objects email attack web-based attack security update