CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Aug 26, 2024

High

CISA KEV

CVE-2018-0824

Microsoft—Windows

Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.

Required Action

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824; https://nvd.nist.gov/vuln/detail/CVE-2018-0824

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Aug 5, 2024
KEV Added: Aug 5, 2024
Due Date: Aug 26, 2024
Related Articles: 0

Vendor

Microsoft

Windows