CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate .docx generate to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. creeate blank docx file. 2. add "Bitmap Iamge" object in "Inert/Object" menu. Add Object...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx 生成 用于利用 CVE-2021-40444（Microsoft Office Word 远程代码执行漏洞）的 docx 生成 1. 创建 blink .docx 文件。 2. 在"插入/对象"菜单中添加"位图图像"对象。 3. 保存并解压 docx。 4. 修改 word/rels/document.xml.rels 5. 修改 word/document.xml 6. 压缩文件夹并重命名为 .docx 7. 准备 html 和 cab 文件。 8. 尽情享用！...

CVE-2022-30190

CVE-2022-30190 Microsoft Office Word RCE Reproduction CVE-2022-30190 Vulnerability Overview MS Office docx files may contain external OLE object references as HTML files. There is an HTML scenario ms-msdt: that calls the msdt diagnostic tool, which is capable of executing arbitrary code specified...

CVE-2021-40444

完全武器化的CVE-2021-40444 用于利用CVE-2021-40444（Microsoft Office Word远程代码执行）的恶意docx生成器，可与任意DLL文件配合使用。 背景 尽管互联网上已经有许多PoC，我决定自己尝试武器化这个漏洞，因为我能找到的现有资料缺乏值得分享的有价值信息，同时考虑到微软已经发布了该漏洞的补丁。 到目前为止，我看到的用于创建功能完整的生成器的唯一有价值资源是： Ret2Pwn的博客 j00sean的推文 上述资源概述了创建完整攻击链所需的许多要求。为避免重复太多不必要的信息，我只总结相关细节。 攻击链 1. 打开Docx文件 2...

CVE-2021-40444

完全武装化されたCVE-2021-40444 CVE-2021-40444（Microsoft Office Word リモートコード実行）を悪用する悪意のあるdocxジェネレーター。任意のDLLファイルで動作します。 2022年5月31日更新 - CVE-2022-30190 - Follina 現在、このジェネレーターは「Follina」攻撃（ms-msdtを活用）を悪用するために必要な文書も生成できます。 背景...

CVE-2021-40444-exp

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2021-40444

CVE-2021-40444 completamente armado Generador de docx malicioso para explotar CVE-2021-40444 ejecución remota de código en Microsoft Office Word, funciona con archivos DLL arbitrarios. Antecedentes Aunque hay muchos PoC por ahí en internet, decidí probar suerte armando esta vulnerabilidad, ya que...

CVE-2021-40444-Microsoft-Office-Word-Remote-Code-Execution-

CVE-2021-40444-Microsoft-Office-Word-远程代码执行-...

CVE-2026-70105

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-70319

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-64917

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-58651

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-66810 Microsoft Office Word Information Disclosure Vulnerability

...

CVE-2026-64917 Microsoft Office Word Information Disclosure Vulnerability

...

CVE-2026-64917

CVE-2026-64917 : An out-of-bounds read in Microsoft Office Word can allow a local attacker to disclose information. Affects Word-related processing; root cause is an out-of-bounds read leading to a confidentiality impact (C:H, I:N, A:N) with a CVSS v3.1 base score of 5.5 (Local access, no privile...

EUVD-2026-56717

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-64905

CVE-2026-64905 is a Microsoft Office Word vulnerability described as a buffer over-read that could allow an attacker to execute code locally. Affected product: Microsoft Word. Root cause: unspecified in provided documents beyond the buffer over-read description. Impact: arbitrary code execution w...