Exploit for UnmarshalPwn

CVE-2018-0624 CVE-2018-0824

kitploit · 2026-08-29

Description

UnmarshalPwn is a POC for CVE-2018-0824 demonstrating an unmarshal vulnerability.

Affected software

Yayoi-kk Aoiro Shinkoku≤ 23.1.1

Yayoi-kk Hanbai≤ 20.0.2

Yayoi-kk Kaikei≤ 23.1.1

Yayoi-kk Kokyaku Kanri≤ 11.0.2

All known vulnerabilities by product

Com Windows Windows 10 Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008 Windows Server 2008 R2

CVSS Score

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

73.2%higher than 99.4% of all CVEs

Updated 2026-08-29

Exploit Details

Modified:2026-08-29 02:28

Last Seen:2026-08-29 08:26

Reporter:KitPloit

Tags

UnmarshalPwnCVE-2018-0824unmarshal vulnerabilityproof of conceptsecurity tool

Other exploits for the same CVE

Immunity Canvas: UNMARSHAL_TO_SYSTEM

2018-09-07 Immunity CanvasCANVAS

Windows unmarshal post exploitation

2018-08-05 Nicolas Joly, Matthias Kaiser, Sanjay Gondaliya, Pratik Shah <pratik@notsosecure.com>METASPLOITRuby

Microsoft COM for Windows - Privilege Escalation Exploit

2018-06-19 Code WhiteZDT

Microsoft COM for Windows - Privilege Escalation

2018-06-18 Code WhiteEXPLOITPACK

Microsoft COM for Windows - Privilege Escalation

2018-06-18 Code WhiteEXPLOITDB

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-CODEWHITESEC-UNMARSHALPWN
# UnmarshalPwn

POC لـ CVE-2018-0824

للتفاصيل، انظر https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html