Exploit for Use After Free in Microsoft

🗓️ 04 May 2026 18:53:35Reported by C-G-creatorType

Investigation of a true positive Windows OLE zero-click exploit via malicious RTF email (CVE-2025-21298) with containment.

Reporter	Title	Published	Views	Family All 55
GithubExploit	Exploit for Use After Free in Microsoft	20 Jan 202518:16	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	7 Mar 202516:54	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	13 Sep 202509:24	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	9 Aug 202511:24	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	11 Oct 202519:40	–	githubexploit
Information Security Automation	January Microsoft Patch Tuesday	14 Jan 202523:22	–	avleonov
Information Security Automation	New episode “In the Trend of VM” (#12): 8 February CVEs & Why the Darknet Matters for VM Specialists	11 Mar 202510:10	–	avleonov
Information Security Automation	About Remote Code Execution – Windows OLE (CVE-2025-21298) vulnerability	23 Jan 202508:14	–	avleonov
BDU FSTEC	Vulnerability of the ole32.dll!UtOlePresStmToContentsStm function in Windows OLE operating systems, allowing a perpetrator to execute arbitrary code	21 Jan 202500:00	–	bdu_fstec
Circl	CVE-2025-21298	14 Jan 202517:29	–	circl

04 May 2026 18:54Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.19.8

EPSS0.80912

SSVC