Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-2336

No fix known EPSS 3%

Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface. Attacker passing different type of object than this assumed by developers can cause arbitrary code execution.

Published 2017-01-06 · CVE record · OSV

Products: Ruby