Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2018-0824
HistoryAug 05, 2024 - 12:00 a.m.

Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

2024-08-0500:00:00
CISA
www.cisa.gov
23
microsoft
com
windows
deserialization
untrusted data
vulnerability
privilege escalation
remote code execution
specially crafted file
script

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON

Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.

Related

talosblog 3
prion 1
cvelist 1
cve 1
vulnrichment 1
mskb 12
symantec 1
metasploit 1
attackerkb 1
mscve 1
nvd 1
exploitpack 1
zdt 1
canvas 1
exploitdb 1
thn 2
nessus 9
kaspersky 2
openvas 7
trendmicroblog 1
talosblog
talosblog
There is no real fix to the security issues recently found in GitHub and other similar software
2024-08-01 18:00:00
APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike
2024-08-01 12:00:14
Microsoft Patch Tuesday - May 2018
2018-05-08 12:02:00
prion
prion
Remote code execution
2018-05-09 19:29:00
cvelist
cvelist
CVE-2018-0824
2018-05-09 19:00:00
cve
cve
CVE-2018-0824
2018-05-09 19:29:00
vulnrichment
vulnrichment
CVE-2018-0824
2018-05-09 19:00:00
mskb
mskb
Description of the security update for the Microsoft COM for Windows remote code execution vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
2018-05-08 07:00:00
May 8, 2018—KB4103726 (Security-only update)
2018-05-08 07:00:00
May 8, 2018—KB4103712 (Security-only update)
2018-05-08 07:00:00
symantec
symantec
Microsoft Windows CVE-2018-0824 Remote Code Execution Vulnerability
2018-05-08 00:00:00
metasploit
metasploit
Windows unmarshal post exploitation
2018-10-19 23:15:44
attackerkb
attackerkb
CVE-2018-0824
2018-05-09 00:00:00
mscve
mscve
Microsoft COM for Windows Remote Code Execution Vulnerability
2018-05-08 07:00:00
nvd
nvd
CVE-2018-0824
2018-05-09 19:29:00
exploitpack
exploitpack
Microsoft COM for Windows - Privilege Escalation
2018-06-18 00:00:00
zdt
zdt
Microsoft COM for Windows - Privilege Escalation Exploit
2018-06-19 00:00:00
canvas
canvas
Immunity Canvas: UNMARSHAL_TO_SYSTEM
2018-09-07 14:29:00
exploitdb
exploitdb
Microsoft COM for Windows - Privilege Escalation
2018-06-18 00:00:00
thn
thn
APT41 Hackers Use ShadowPad, Cobalt Strike in Taiwanese Institute Cyber Attack
2024-08-02 16:32:00
Google Patches New Android Kernel Vulnerability Exploited in the Wild
2024-08-06 06:12:00
nessus
nessus
Security Updates for Windows Server 2008 (May 2018)
2018-05-09 00:00:00
KB4103726: Windows Server 2012 May 2018 Security Update
2018-05-08 00:00:00
KB4103715: Windows 8.1 and Windows Server 2012 R2 May 2018 Security Update
2018-05-08 00:00:00
kaspersky
kaspersky
KLA11894 Multiple vulnerabilities in Microsoft Products (ESU)
2018-05-08 00:00:00
KLA11241 Multiple vulnerabilities in Microsoft Windows
2018-05-08 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4103718)
2018-05-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4103725)
2018-05-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4103716)
2018-05-09 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 7, 2018
2018-05-11 15:37:20

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON
Related for CISA-KEV-CVE-2018-0824
talosblog3prion1cvelist1cve1vulnrichment1mskb12symantec1metasploit1attackerkb1mscve1nvd1exploitpack1zdt1canvas1exploitdb1thn2nessus9kaspersky2openvas7trendmicroblog1