ShimMe

ShimMe Tools from the DEFCON 32 talk "SHIM me what you got - Manipulating Shim and Office for Code Injection" Office Injector - Invokes an RPC method in OfficeClickToRun service that will inject a DLL into a suspended process running as NT AUTHORITY\SYSTEM launched by the task scheduler service,...

EUVD-2026-29635

Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-40418

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

Microsoft Office ClickToRun Access Control Vulnerability

Microsoft Office ClickToRun is a component developed by Microsoft that allows for the download and installation of Microsoft Office products. There is an access control error vulnerability present in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...

Microsoft Office ClickToRun resource management error vulnerability

Microsoft Office ClickToRun is a component developed by Microsoft Corporation that allows for the download and installation of Microsoft Office products. There is a resource management vulnerability in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...

EUVD-2021-13829

Malware in sbrugna...

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Microsoft Office is an office software suite product from the United States Microsoft Corporation Microsoft. The product commonly used components include Word, Excel, Access, Powerpoint, FrontPage, etc. Microsoft Office ClickToRun there is a remote code execution vulnerability, there are no detai...

CVE-2022-22004

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

CVE-2022-22004

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

Remote code execution

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

CVE-2022-22004 Microsoft Office ClickToRun Remote Code Execution Vulnerability

...

CVE-2022-22004

CVE-2022-22004 is a Microsoft Office ClickToRun remote code execution vulnerability. Affected software: Microsoft Office ClickToRun components within Office products. Root cause and impact are described across connected sources: exploitation leads to remote code execution with a high impact profi...

CVE-2022-22004: Undefined Security Weakness

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

Microsoft Office ClickToRun Remote Code Execution Vulnerability

...

Microsoft Office code injection vulnerability

Microsoft Office is an office software suite product from the United States Microsoft Corporation Microsoft. The product commonly used components include Word, Excel, Access, Powerpoint, FrontPage, etc. Microsoft Office ClickToRun there is a remote code execution vulnerability, there are no detai...

KLA12454 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An...

CVE-2021-27058

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

CVE-2021-27058

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

Remote code execution

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

CVE-2021-27058 Microsoft Office ClickToRun Remote Code Execution Vulnerability

...