CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-05-09
Microsoft COM for Windows Deserialization Remote Code Execution Vulnerability (CVE-2018-0824)
[Affected Scope] Microsoft Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted serialized objects
[Mitigation] Apply the official Microsoft cumulative security updates and restrict untrusted COM/DCOM network traffic