Description
Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 3 May 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.