CVE-2024-30077
HighCVSS 8.0Exploitation Probability (EPSS)
High risk76th percentile - higher than 76% of all known CVEs
Summary
A remote code execution vulnerability in the Windows OLE component allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires user interaction, such as opening a specially crafted file.
Risk Assessment
An attacker could gain full control of the victim's system, enabling malware installation, data modification, or system disruption. The risk is elevated in environments where users frequently open attachments from untrusted sources.
Recommendation
Apply the security update released by Microsoft in the June 2024 update immediately. Restrict opening suspicious files and email attachments.
Other vulnerabilities in Windows OLE
See all- CVE-2026-50686High
Windows OLE has a type confusion vulnerability that allows an unauthorized attacker to execute code remotely.
- CVE-2026-50344High
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.
- CVE-2024-21372High
Remote code execution vulnerability in Windows OLE. An attacker could exploit it to execute code on the target system.
- CVE-2023-35323High
A vulnerability in Windows OLE allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
Original NVD description (English source)
Windows OLE Remote Code Execution Vulnerability