EXPOSURES › CVE-2012-0158
CVE-2012-0158
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft MSCOMCTL.OCX contained a remote code execution vulnerability that allowed attackers to take full control of affected systems.
This vulnerability in Microsoft MSCOMCTL.OCX allowed remote code execution under the current user's context, enabling attackers to compromise systems. DIB organizations must ensure all legacy components and OCX controls are patched or removed, as unpatched RCE flaws are high-priority compliance gaps under NIST 800-171. The fact that this CVE is in the KEV catalog confirms it was actively exploited in the wild, making it a severe embarrassment for any organization running unpatched versions.
Shame score — A known RCE vulnerability in a widely used Microsoft component was left unpatched long enough to be added to the KEV catalog, indicating negligent patch management and avoidable exposure.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |