Description
Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| n/a | n/a / n/a | n/a | affected |
| windows_10 | microsoft / windows_10 | >= 0, <= * | affected |
| windows_10 | microsoft / windows_10 | 1607 | affected |
| windows_10 | microsoft / windows_10 | 1703 | affected |
| windows_10 | microsoft / windows_10 | 1709 | affected |
| windows_10 | microsoft / windows_10 | 1803 | affected |
| windows_7 | microsoft / windows_7 | >= 0, <= * | affected |
| windows_8.1 | microsoft / windows_8.1 | >= 0, <= * | affected |
| windows_rt_8.1 | microsoft / windows_rt_8.1 | >= 0, <= * | affected |
| windows_server_2008 | microsoft / windows_server_2008 | >= 0, <= * | affected |
| windows_server_2008 | microsoft / windows_server_2008 | r2 | affected |
| windows_server_2008 | microsoft / windows_server_2008 | r2 | affected |
| windows_server_2012 | microsoft / windows_server_2012 | >= 0, <= * | affected |
| windows_server_2012 | microsoft / windows_server_2012 | r2 | affected |
| windows_server_2016 | microsoft / windows_server_2016 | >= 0, <= * | affected |
| windows_server_2016 | microsoft / windows_server_2016 | 1709 | affected |
| windows_server_2016 | microsoft / windows_server_2016 | 1803 | affected |