CISA adds Microsoft COM for Windows bug to its Known Exploited Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a deserialization of untrusted data vulnerability in Microsoft COM for Windows, tracked as CVE-2018-0824 (CVSS score of 7.5), to its Known Exploited Vulnerabilities (KEV) catalog.
originally posted at https://stacker.news/items/639504