EXPOSURES › CVE-2018-0824
CVE-2018-0824
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft's Windows COM deserialization vulnerability (CVE-2018-0824) enables remote code execution and privilege escalation via untrusted files.
This unpatched vulnerability allows attackers to execute arbitrary code on Windows systems, posing a severe risk to DIB organizations relying on Microsoft products. The fact that it is actively exploited in the KEV list indicates widespread exploitation, requiring immediate patching and network segmentation to prevent unauthorized access.
Shame score — While the vulnerability is severe and actively exploited, the vendor is a major player and the issue is well-known, resulting in moderate embarrassment compared to negligent vendor failures.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |