ZDI-26-849: Microsoft Qlib RestrictedUnpickler Deserialization of Untrusted Data Remote Code Execution Vulnerability

Impact

Successful exploitation allows remote attackers to execute arbitrary code on affected installations of Microsoft Qlib, potentially leading to full system compromise. User interaction is required for exploitation, limiting the attack vector to scenarios where the user visits a malicious page or opens a malicious file.