VulnerabilityPublished
ZDI-26-273: Microsoft Olive Deserialization of Untrusted Data Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 26 May 2026, 20:33 UTC
What to do
AI-suggested
Microsoft has issued an official update to correct this vulnerability. Users and administrators should apply the provided patch from Microsoft promptly to mitigate the risk. No additional mitigation steps are indicated beyond applying the official fix.
Description
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Olive. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
References
Community reviews
Loading reviews…