auren-research/cyber-sec huggingface dataset:
cveID: CVE-2021-33739
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-33739
cveID: CVE-2016-0185
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Media Center Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-0185
cwes: CWE-20
cveID: CVE-2020-0683
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Installer Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-0683
cveID: CVE-2020-17087
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-17087
cwes: CWE-131
cveID: CVE-2021-33742
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-33742
cwes: CWE-787
CWE-823
cveID: CVE-2021-31199
vendorProject: Microsoft
product: Enhanced Cryptographic Provider
vulnerabilityName: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-31199
cveID: CVE-2021-33771
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-33771
cwes: CWE-119
cveID: CVE-2021-31956
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows NTFS Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-31956
cwes: CWE-191
CWE-787
cveID: CVE-2021-31201
vendorProject: Microsoft
product: Enhanced Cryptographic Provider
vulnerabilityName: Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-31201
cveID: CVE-2021-31979
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-31979
cwes: CWE-119
cveID: CVE-2020-0938
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-0938
cwes: CWE-787
cveID: CVE-2020-17144
vendorProject: Microsoft
product: Exchange Server
vulnerabilityName: Microsoft Exchange Server Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-17144
cwes: CWE-502
cveID: CVE-2020-0986
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-0986
cwes: CWE-787
cveID: CVE-2020-1020
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-1020
cwes: CWE-787
cveID: CVE-2021-38645
vendorProject: Microsoft
product: Open Management Infrastructure (OMI)
vulnerabilityName: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-38645
cveID: CVE-2021-34523
vendorProject: Microsoft
product: Exchange Server
vulnerabilityName: Microsoft Exchange Server Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-34523
cwes: CWE-287
{"cveID":"CVE-2017-7269","vendorProject":"Microsoft","product":"Internet Information Services (IIS)","vulnerabilityName":"Microsoft Windows Server Buffer Overflow Vulnerability","dateAdded":"2021-11-03","shortDescription":"Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with \"If:
cveID: CVE-2021-36948
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-36948
cveID: CVE-2021-38649
vendorProject: Microsoft
product: Open Management Infrastructure (OMI)
vulnerabilityName: Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-38649
cveID: CVE-2020-0688
vendorProject: Microsoft
product: Exchange Server
vulnerabilityName: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-0688
cwes: CWE-287
cveID: CVE-2017-0143
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0143
cwes: CWE-20
cveID: CVE-2016-7255
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-7255
cwes: CWE-264
cveID: CVE-2019-0708
vendorProject: Microsoft
product: Remote Desktop Services
vulnerabilityName: Microsoft Remote Desktop Services Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0708
cwes: CWE-416
cveID: CVE-2021-34473
vendorProject: Microsoft
product: Exchange Server
vulnerabilityName: Microsoft Exchange Server Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-34473
cwes: CWE-918
cveID: CVE-2020-1464
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Spoofing Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-1464
cwes: CWE-347
cveID: CVE-2021-1732
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1732
cwes: CWE-787
cveID: CVE-2021-34527
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Print Spooler Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: Reference CISA's ED 21-04 (https://www.cisa.gov/news-events/directives/ed-21-04-mitigate-windows-print-spooler-service-vulnerability) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-04. https://nvd.nist.gov/vuln/detail/CVE-2021-34527
cwes: CWE-269
cveID: CVE-2021-31207
vendorProject: Microsoft
product: Exchange Server
vulnerabilityName: Microsoft Exchange Server Security Feature Bypass Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-31207
cwes: CWE-20
CWE-434
cveID: CVE-2019-0803
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0803
cveID: CVE-2020-1040
vendorProject: Microsoft
product: Hyper-V RemoteFX
vulnerabilityName: Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote code execution on the host operating system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-1040
cwes: CWE-20
cveID: CVE-2021-28310
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-28310
cwes: CWE-787
cveID: CVE-2020-1350
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows DNS Server Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: Reference CISA's ED 20-03 (https://www.cisa.gov/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 20-03. https://nvd.nist.gov/vuln/detail/CVE-2020-1350
cveID: CVE-2021-26411
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-26411
cwes: CWE-416
cveID: CVE-2019-0859
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0859
cveID: CVE-2021-40444
vendorProject: Microsoft
product: MSHTML
vulnerabilityName: Microsoft MSHTML Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-40444
cwes: CWE-22
cveID: CVE-2017-8759
vendorProject: Microsoft
product: .NET Framework
vulnerabilityName: Microsoft .NET Framework Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-8759
cwes: CWE-20
cveID: CVE-2018-8653
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-8653
cwes: CWE-787
cveID: CVE-2019-0797
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0797
cveID: CVE-2021-36942
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-36942
cwes: CWE-749
cveID: CVE-2019-1215
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1215
cveID: CVE-2018-0798
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0798
cwes: CWE-787
cveID: CVE-2018-0802
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Memory Corruption Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0802
cwes: CWE-787
cveID: CVE-2012-0158
vendorProject: Microsoft
product: MSCOMCTL.OCX
vulnerabilityName: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2012-0158
cwes: CWE-94