During the last years, this OLE objects have been a good indicator that a document may aim to exploit the CVE-2018-0798 vulnerability in order to infect with some kind of malware.
Source dataSource dataCopied from an authoritative feed: NVD, CVE.org, CISA KEV, FIRST EPSS or MITRE CTID mappings, or labelled by the annotators of a published dataset. CTID attack_to_cve (Phase 1); claude-haiku-5-5: Memory corruption yields code execution in client; AnnoCTR expert entity-linking label (train split); ATT&CK ID T1203 written in the same sentence as CVE-2018-0798.MITRE CTID mapping of the CVE
During the last years, this OLE objects have been a good indicator that a document may aim to exploit the CVE-2018-0798 vulnerability in order to infect with some kind of malware.