CVE-2018-0824

8.8

HIGH

Microsoft COM for Windows Deserialization of Untru - [Actively Exploited]

Description

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

INFO

Published Date :

May 9, 2018, 7:29 p.m.

Last Modified :

Aug. 8, 2024, 2:50 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

2.8

CISA Notification

CISA KEV (Known Exploited Vulnerabilities)

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild.

Due Date: Aug 26, 2024

Alert Date: Aug 05, 2024 | 92 days ago

Description :

Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.

Required Action :

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes :

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824

Public PoC/Exploit Available at Github

CVE-2018-0824 has a 12 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2018-0824 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product
1	Microsoft	windows_10
2	Microsoft	windows_7
3	Microsoft	windows_8.1
4	Microsoft	windows_rt_8.1
5	Microsoft	windows_server_2008
6	Microsoft	windows_server_2012
7	Microsoft	windows_server_2016
8	Microsoft	windows_10_1607
9	Microsoft	windows_10_1507
10	Microsoft	windows_10_1703
11	Microsoft	windows_10_1709
12	Microsoft	windows_10_1803
13	Microsoft	windows_server_1803
14	Microsoft	windows_server_1709

: Total Affected Vendor : 1 | Products : 14

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2018-0824.

URL	Resource
http://www.securityfocus.com/bid/104030	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040848	Broken Link Third Party Advisory VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824	Patch Vendor Advisory
https://www.exploit-db.com/exploits/44906/	Exploit Third Party Advisory VDB Entry

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Cruxer8Mech/Idk

None

Updated: 5 months, 1 week ago

0 stars 0 fork 0 watcher

Born at : May 26, 2024, 1:37 p.m. This repo has been linked 233 different CVEs too.

lnick2023/nicenice

None

Updated: 1 year, 9 months ago

0 stars 0 fork 0 watcher

Born at : Jan. 11, 2023, 1:21 p.m. This repo has been linked 1042 different CVEs too.

paulveillard/cybersecurity-exploit-development

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Exploit Development.

code-execution developer developer-experience developer-tools development development-tools exploit exploitation exploitation-framework exploitation-frameworks exploitation-menu vulnerability-detection

Updated: 4 months, 2 weeks ago

15 stars 5 fork 5 watcher

Born at : April 17, 2022, 11:20 p.m. This repo has been linked 23 different CVEs too.

ycdxsb/WindowsPrivilegeEscalation

Collection of Windows Privilege Escalation (Analyse/PoC/Exp...)

Updated: 1 month, 4 weeks ago

296 stars 59 fork 59 watcher

Born at : April 22, 2021, 3:29 a.m. This repo has been linked 233 different CVEs too.

developer3000S/PoC-in-GitHub

None

Updated: 8 months ago

33 stars 3 fork 3 watcher

Born at : March 12, 2021, 12:22 p.m. This repo has been linked 1063 different CVEs too.

Flerov/WindowsExploitDev

Windows Exploit Development Tutorial Series

Python PLSQL JavaScript

Updated: 5 months, 2 weeks ago

0 stars 1 fork 1 watcher

Born at : Jan. 6, 2021, 2:39 p.m. This repo has been linked 23 different CVEs too.

hectorgie/PoC-in-GitHub

None

Updated: 1 year, 2 months ago

17 stars 10 fork 10 watcher

Born at : Jan. 2, 2021, 10:19 p.m. This repo has been linked 1050 different CVEs too.

0xT11/CVE-POC

None

Updated: 2 months, 2 weeks ago

82 stars 32 fork 32 watcher

Born at : Oct. 2, 2020, 2:49 p.m. This repo has been linked 1111 different CVEs too.

cranelab/exploit-development

esoteric

Updated: 2 months, 3 weeks ago

49 stars 12 fork 12 watcher

Born at : Sept. 9, 2020, 8:28 p.m. This repo has been linked 23 different CVEs too.

xbl3/awesome-cve-poc_qazbnm456

None

Updated: 2 months, 3 weeks ago

13 stars 4 fork 4 watcher

Born at : May 25, 2020, 7:51 a.m. This repo has been linked 1027 different CVEs too.

codewhitesec/UnmarshalPwn

POC for CVE-2018-0824

C++ C

Updated: 2 months, 3 weeks ago

85 stars 31 fork 31 watcher

Born at : June 15, 2018, 8:59 a.m. This repo has been linked 2 different CVEs too.

qazbnm456/awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome cve poc

Updated: 1 month, 4 weeks ago

3289 stars 678 fork 678 watcher

Born at : Feb. 2, 2017, 6:43 a.m. This repo has been linked 1042 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2018-0824 vulnerability anywhere in the article.

Cybersecurity News

Godzilla Backdoor: A Stealthy Threat Targeting Atlassian Confluence Flaw (CVE-2023-22527)

Attack chain | Image: TrendMicroA recent discovery by cybersecurity researchers at Trend Micro has unveiled a sophisticated new attack vector targeting Atlassian Confluence servers, leveraging the cri ...

Published Date: Aug 30, 2024 (2 months ago)

CVE-2024-6671 CVE-2024-6670 CVE-2024-6768 CVE-2023-22527 CVE-2018-0824

Cybersecurity News

Critical CVE-2024-45321 Flaw in Popular Perl Module Installer cpanminus, No Patch Available

In a significant security advisory, the Perl community has been alerted to a critical vulnerability, CVE-2024-45321, affecting the widely-used App::cpanminus (cpanm) tool. Rated with a CVSS score of 9 ...