24140 matches found
CVE-2026-25512-PoC-Group-Office-Authenticated-RCE
CVE-2026-25512 PoC – Group-Office 通过 TNEF 处理器实现认证 RCE 作者： Mohammed Idrees Banyamer 账号： @banyamersecurity GitHub： mbanyamer 日期： 2026 年 2 月 4 日 漏洞利用标题 Group-Office Intermesh 26.0.4 – 通过 TNEF 附件处理器实现认证 RCE CVE CVE-2026-25512 CWE CWE-78（操作系统命令注入） 厂商 Intermesh / Group-Office 受影响版本 26.0.4（同时影响部分 25.x /...
detect_CVE-2026-21509
Detecciones para la vulnerabilidad CVE-2026-21509 en MS Office Este repositorio contiene una regla YARA para detectar documentos RTF con una posible explotación de CVE-2026-21509, y un script de Python para comprobar si los archivos de MS Office contienen objetos OLE Shell.Explorer.1, que están...
SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass-
SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass- 微软刚刚针对 CVE-2026-21509 发布了紧急补丁，这是 Office 套件中的一个零日漏洞，当用户仅打开文件时即可绕过 OLE/COM 缓解措施。他们认为针对 Office 2021+ 的“服务端变更”是一道坚不可摧的墙。 SCTT-2026-33-0007：Office 时间漩涡（OLE 奇点） 在 Microsoft Office OLE2 对象模型中实现定理 4.2。 📡 理论分类 ID： SCTT-2026-33-0007 攻击向量： 远程 / 社会工程（文档下载） 物理原...
CTT-MICROSOFT-OFFICE-OLE-MANIFOLD-BYPASS-CVE-2026-21509
🏛️CTT -Microsoft Office OLE Manifold BYPASS CVE-2026-21509 Standardized CTT Implementation for 1096x Temporal Execution ! 📜 漏洞概述 CVE-2026-21509 是 Microsoft Office OLE（对象链接与嵌入）验证引擎中的一个严重绕过漏洞。虽然标准的“层流”利用尝试操纵静态 COM 对象，但本仓库利用定理 4.2 实现了对对象定义规则（ODR）的推测性竞态条件绕过。 🕰️ CTT 优势（定理 4.2） 针对此 CVE...
CVE-2026-21509-POC
CVE-2026-21509-POC Office 漏洞的 POC...
Security Updates for Microsoft Access Products C2R (September 2026)
The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. CVE-2026-69529, CVE-2026-69778 - Stack-based buffer overflow ...
Security Updates for Microsoft Office Online Server (September 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-81947...
Security Updates for Microsoft Office Products C2R (September 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-69285, CVE-2026-77898, CVE-2026-78505 - Heap-based buffer...
Security Updates for Microsoft Publisher Products C2R (September 2026)
The Microsoft Publisher Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. CVE-2026-69742 - Deserialization of untrusted data ...
Security Updates for Microsoft Word Products C2R (September 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVE-2026-69671, CVE-2026-69764, CVE-2026-72972, CVE-2026-72973,...
Ashwesker-CVE-2026-21509
🛡️ CVE-2026-21509 — Microsoft Office 零日漏洞 状态： 已被积极利用 → 紧急补丁已发布 严重性： 🔴 高 风险类型： 安全功能绕过 🔍 这是什么？ CVE-2026-21509 是 Microsoft Office 中的一个严重漏洞，攻击者可以通过诱骗 Office 信任恶意文件来绕过内置安全防护 。 一旦打开，这些文件可以： 绕过安全控制 加载隐藏的嵌入内容 启用后续攻击，如恶意软件安装 📌 关键详情 字段| 值 ---|--- CVE ID| CVE-2026-21509 类别| 安全功能绕过 利用情况| 已在野外确认 用户交互|...
Security Updates for Microsoft Word Products (September 2026)
The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-62804 - Heap-based buffer overflow in Microsoft...
Security Updates for Microsoft Publisher Products (September 2026)
The Microsoft Publisher Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. CVE-2026-69742 - Deserialization of untrusted...
Security Updates for Microsoft Office Products (September 2026)
The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. CVE-2026-64918 - Heap-based buffer overflow in...
Security Updates for Microsoft Access Products (September 2026)
The Microsoft Access Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. CVE-2026-69477 - Heap-based buffer overflow in Microsoft Office...
vulnerabilities present in Microsoft Office
Microsoft has patched 114 vulnerabilities in various Office products. A malicious individual could exploit these vulnerabilities to carry out attacks that can lead to various types of damage, as listed in the table below. For successful exploitation, the attacker would need to trick the victim in...
CVE-2026-85875
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-83951
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...