{"schemaVersion":3,"id":"CVE-2018-0824","aliases":[],"status":"published","duplicateOf":null,"title":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","description":"A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.","dates":{"published":"2018-05-09T19:00:00.000Z","modified":"2025-10-21T23:45:51.530Z","reserved":null,"kevAdded":["2024-08-05T00:00:00.000Z"],"kevDue":["2024-08-26T00:00:00.000Z"]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5.1,"severity":"medium","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.73037,"percentile":0.99454,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":-0.14800000000000368,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.73185},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.73037,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.73037,"percentile":0.99454}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.73185,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.73037,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.73037,"percentile":0.99454}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2024-08-05T00:00:00.000Z","dueDate":"2024-08-26T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","name":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","description":"Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.","notes":[{"type":"url","href":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824","label":"msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-0824","label":"nvd.nist.gov/vuln/detail/CVE-2018-0824"}],"vendor":"Microsoft","product":"Windows","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2024-08-05T00:00:00.000Z","dueDate":"2024-08-26T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","name":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","description":"Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.","notes":[{"type":"url","href":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824","label":"msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-0824","label":"nvd.nist.gov/vuln/detail/CVE-2018-0824"}],"vendor":"Microsoft","product":"Windows","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"44906","name":"Microsoft COM for Windows - Privilege Escalation","source":"exploit-database","url":"https://www.exploit-db.com/exploits/44906","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"local","platform":"windows","file":"exploits/windows/local/44906.txt","codes":["CVE-2018-0824"]},"metasploit":null},{"id":"MSF_POST_WINDOWS_ESCALATE_UNMARSHAL_CMD_EXEC","name":"Windows unmarshal post exploitation","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshal_cmd_exec.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"local","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"post/windows/escalate/unmarshal_cmd_exec","rank":"300","rankName":"normal","postAuth":false,"check":false,"stability":["crash-safe"],"sideEffects":["artifacts-on-disk"],"reliability":[]}}],"exploitCount":2,"weaknesses":[{"id":"CWE-502","name":"Deserialization of Untrusted Data","description":"The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/502.html"}],"affected":[{"vendor":"microsoft","product":"windows_10_1507","name":"windows 10 1507","label":"windows_10_1507","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1507"},{"vendor":"microsoft","product":"windows_10_1607","name":"windows 10 1607","label":"windows_10_1607","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1607"},{"vendor":"microsoft","product":"windows_10_1703","name":"windows 10 1703","label":"windows_10_1703","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1703"},{"vendor":"microsoft","product":"windows_10_1709","name":"windows 10 1709","label":"windows_10_1709","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1709"},{"vendor":"microsoft","product":"windows_10_1803","name":"windows 10 1803","label":"windows_10_1803","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1803"},{"vendor":"microsoft","product":"windows_7","name":"windows 7","label":"windows_7","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_7"},{"vendor":"microsoft","product":"windows_8.1","name":"windows 8.1","label":"windows_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_81"},{"vendor":"microsoft","product":"windows_rt_8.1","name":"windows rt 8.1","label":"windows_rt_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_rt_81"},{"vendor":"microsoft","product":"windows_server_1709","name":"windows server 1709","label":"windows_server_1709","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_server_1709"},{"vendor":"microsoft","product":"windows_server_1803","name":"windows server 1803","label":"windows_server_1803","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_server_1803"},{"vendor":"microsoft","product":"windows_server_2008","name":"windows server 2008","label":"windows_server_2008","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2:sp1","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012","name":"windows server 2012","label":"windows_server_2012","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016","name":"windows server 2016","label":"windows_server_2016","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_server_2016"}],"affectedCount":13,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securitytracker.com/id/1040848","label":"www.securitytracker.com/id/1040848","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/44906/","label":"www.exploit-db.com/exploits/44906/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/104030","label":"www.securityfocus.com/bid/104030","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0824","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0824","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-05-09T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2024-08-05T00:00:00.000Z","label":"Added to CISA KEV","detail":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2024-08-26T00:00:00.000Z","label":"CISA remediation due","detail":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:45:51.530Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:02:29.720Z","stale":false,"partial":false}}