ShimMe

ShimMe DEFCON 32 トーク “SHIM me what you got - Manipulating Shim and Office for Code Injection” のツール群 Office Injector - OfficeClickToRun サービスの RPC メソッドを呼び出して、タスク スケジューラ サービスが起動した、NT AUTHORITY\SYSTEM として実行中の一時停止プロセスに DLL を注入し、管理者から SYSTEM への権限昇格を実現します。 Shim Injector - 非公開の shim...

EUVD-2026-29635

Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-40418

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

Microsoft Office ClickToRun 资源管理错误漏洞

Microsoft Office ClickToRun is a component developed by Microsoft Corporation that allows for the download and installation of Microsoft Office products. There is a resource management vulnerability in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...

Microsoft Office ClickToRun 访问控制错误漏洞

Microsoft Office ClickToRun is a component developed by Microsoft that allows for the download and installation of Microsoft Office products. There is an access control error vulnerability present in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...

EUVD-2021-13829

Malware in sbrugna...

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Microsoft Office is an office software suite product from the United States Microsoft Corporation Microsoft. The product commonly used components include Word, Excel, Access, Powerpoint, FrontPage, etc. Microsoft Office ClickToRun there is a remote code execution vulnerability, there are no detai...

CVE-2022-22004

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

CVE-2022-22004

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

Remote code execution

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

CVE-2022-22004

CVE-2022-22004 is a Microsoft Office ClickToRun remote code execution vulnerability. Affected software: Microsoft Office ClickToRun components within Office products. Root cause and impact are described across connected sources: exploitation leads to remote code execution with a high impact profi...

CVE-2022-22004 Microsoft Office ClickToRun Remote Code Execution Vulnerability

...

CVE-2022-22004: Undefined Security Weakness

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

Microsoft Office ClickToRun Remote Code Execution Vulnerability

...

Microsoft Office 代码注入漏洞

Microsoft Office is an office software suite product from the United States Microsoft Corporation Microsoft. The product commonly used components include Word, Excel, Access, Powerpoint, FrontPage, etc. Microsoft Office ClickToRun there is a remote code execution vulnerability, there are no detai...

KLA12454 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An...

CVE-2021-27058

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

Remote code execution

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

CVE-2021-27058 Microsoft Office ClickToRun Remote Code Execution Vulnerability

...

CVE-2021-27058

CVE-2021-27058 affects the Microsoft Office ClickToRun component. The provided documents identify a remote code execution vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), attack vector LOCAL, requires user interaction, and an impact on confidentiality, integrity, and availability. The exa...