CVE-2012-0158
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — MSCOMCTL.OCX
Date Added
2021-11-03
Remediation Due
2022-05-03
Ransomware Use
CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2012-0158
Weakness Classification (1)
Affected Software (20)
| Vendor | Product | Version |
|---|---|---|
| microsoft | biztalk_server | 2002 |
| microsoft | commerce_server | 2002 |
| microsoft | commerce_server | 2007 |
| microsoft | commerce_server_2009 | - |
| microsoft | commerce_server_2009 | r2 |
| microsoft | office | 2003 |
| microsoft | office | 2007 |
| microsoft | office | 2007 |
| microsoft | office | 2010 |
| microsoft | office | 2010 |
| microsoft | office_web_components | 2003 |
| microsoft | sql_server_2000 | - |
| microsoft | sql_server_2005 | - |
| microsoft | sql_server_2008 | - |
| microsoft | sql_server_2008 | - |
| microsoft | sql_server_2008 | r2 |
| microsoft | sql_server_2008 | r2 |
| microsoft | visual_basic | 6.0 |
| microsoft | visual_foxpro | 8.0 |
| microsoft | visual_foxpro | 9.0 |
References & Advisories (13)
US Government Resource
Third Party Advisory
VDB Entry
Third Party Advisory
US Government Resource
Patch
Vendor Advisory
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Third Party Advisory
VDB Entry
Broken Link
Broken Link