{"uuid": "4feae80b-7323-44cb-ac71-a053007371a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshal_cmd_exec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Nicolas Joly\", \"Matthias Kaiser\", \"Sanjay Gondaliya\", \"Pratik Shah \"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a local privilege escalation bug which exists\\n          in Microsoft COM for Windows when it fails to properly handle serialized objects.\", \"disclosure_date\": \"2018-08-05\", \"fullname\": \"post/windows/escalate/unmarshal_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2025-05-09 10:51:17 +0000\", \"name\": \"Windows unmarshal post exploitation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/windows/escalate/unmarshal_cmd_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/escalate/unmarshal_cmd_exec\", \"references\": [\"CVE-2018-0824\", \"URL-https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824\", \"URL-https://github.com/x73x61x6ex6ax61x79/UnmarshalPwn\", \"EDB-44906\"], \"rport\": null, \"session_types\": [], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:41.779628Z"}