LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: 检测到Windows OLE零点击RCE利用 此存储库记录了我对一则LetsDefend告警的调查，该告警涉及与CVE-2025-21298相关的Windows OLE零点击远程代码执行漏洞利用。其目的是展示从电子邮件分类到端点抑制的整个推理过程。 概述 LetsDefend在检测到发送至[email protected]的入站邮件中包含恶意RTF附件后生成了此告警。邮件来自[email protected]，主题为Important: Action Required for Upcoming Project...

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Detección de Explotación RCE Zero-Click OLE de Windows CVE-2025-21298 Walkthrough 🔎 Tabla de Contenido 1. Situación...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- Dobbiamo indagare su un avviso critico che segnala uno sfruttamento di una RCE zero-click in Windows OLE CVE-2025-21298 consegnata tramite un allegato RTF dannoso. Indagine sull'avviso da LetsDefend Il 4 febbraio...

Exploit for Use After Free in Microsoft

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...

About Remote Code Execution – Windows OLE (CVE-2025-21298) vulnerability

About Remote Code Execution - Windows OLE CVE-2025-21298 vulnerability. The vulnerability is from the January Microsoft Patch Tuesday. OLE Object Linking and Embedding is a technology for linking and embedding objects into other documents and objects, developed by Microsoft. A common use of this...

Exploit for Use After Free in Microsoft

content This is a proof-of-concept for CVE-2025-21298 - Wind...

CVE-2025-21298

CVE-2025-21298 is a Windows OLE use-after-free memory corruption vulnerability in ole32.dll (UtOlePresStmToContentsStm) that enables remote code execution via specially crafted RTF, including zero-click scenarios when previews are shown in Outlook. The issue arises from a double-free of the CONTE...

CVE-2025-21298

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpujafeko2t 2025-01-14 18:48:55+00:00| seen|...