LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- Нам предстоит расследовать критическое оповещение о эксплуатации уязвимости Windows OLE zero-click RCE CVE-2025-21298, доставленной через вредоносное вложение в формате RTF. Расследование оповещения из LetsDefend 4...

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Обнаружена эксплуатация Windows OLE Zero-Click RCE CVE-2025-21298 - Пошаговое руководство 🔎 Содержание 1. Ситуация...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336 : Détection d'une exploitation RCE Zero-Click OLE Windows Ce dépôt documente mon enquête sur une alerte LetsDefend impliquant une exploitation RCE zero-click OLE Windows liée à CVE-2025-21298. L'objectif est de montrer le raisonnement derrière la conclusion, du triage des e-mail...

Exploit for Use After Free in Microsoft

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...

About Remote Code Execution – Windows OLE (CVE-2025-21298) vulnerability

About Remote Code Execution - Windows OLE CVE-2025-21298 vulnerability. The vulnerability is from the January Microsoft Patch Tuesday. OLE Object Linking and Embedding is a technology for linking and embedding objects into other documents and objects, developed by Microsoft. A common use of this...

Exploit for Use After Free in Microsoft

content This is a proof-of-concept for CVE-2025-21298 - Wind...

CVE-2025-21298

CVE-2025-21298 is a Windows OLE use-after-free memory corruption vulnerability in ole32.dll (UtOlePresStmToContentsStm) that enables remote code execution via specially crafted RTF, including zero-click scenarios when previews are shown in Outlook. The issue arises from a double-free of the CONTE...

CVE-2025-21298

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpujafeko2t 2025-01-14 18:48:55+00:00| seen|...