Microsoft Video ActiveX Control rule coverage
Summary: Microsoft Security Advisory 972890 reports that the Microsoft Video ActiveX control contains a vulnerability allowing a remote attacker to execute code on a vulnerable system through a call to the control from Internet Explorer. The vulnerability requires no user interaction and is being actively exploited, and Cisco Talos released detection rules for it identified with GID 1, SIDs 15588 through 15677.
Bottom line: An ActiveX control that executes code with no user interaction and is already being exploited leaves no click for a user to avoid and no behavior for awareness training to catch.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026