LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- Нам предстоит расследовать критическое оповещение о эксплуатации уязвимости Windows OLE zero-click RCE CVE-2025-21298, доставленной через вредоносное вложение в формате RTF. Расследование оповещения из LetsDefend 4...

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Windows OLE 제로 클릭 RCE 악용 탐지 CVE-2025-21298 워크스루 🔎 목차 1. 상황 2. 경고 개요 3. 사용된 도구 4...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: Обнаружена эксплуатация Windows OLE с нулевым кликом RCE В этом репозитории описано мое расследование оповещения LetsDefend, связанного с эксплуатацией уязвимости удаленного выполнения кода с нулевым кликом в Windows OLE CVE-2025-21298. Цель — показать ход рассуждений, приведши...

Exploit for Use After Free in Microsoft

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...

About Remote Code Execution – Windows OLE (CVE-2025-21298) vulnerability

About Remote Code Execution - Windows OLE CVE-2025-21298 vulnerability. The vulnerability is from the January Microsoft Patch Tuesday. OLE Object Linking and Embedding is a technology for linking and embedding objects into other documents and objects, developed by Microsoft. A common use of this...

Exploit for Use After Free in Microsoft

content This is a proof-of-concept for CVE-2025-21298 - Wind...

CVE-2025-21298

CVE-2025-21298 is a Windows OLE use-after-free memory corruption vulnerability in ole32.dll (UtOlePresStmToContentsStm) that enables remote code execution via specially crafted RTF, including zero-click scenarios when previews are shown in Outlook. The issue arises from a double-free of the CONTE...

CVE-2025-21298

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpujafeko2t 2025-01-14 18:48:55+00:00| seen|...