CVE-2021-40444-Microsoft-Office-Word-Remote-Code-Execution-

CVE-2021-40444-Microsoft-Office-Word-Remote-Code-Execution-...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate docx generating to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. create blink .docx file. 2. add "Bitmap Image" object in "Insert/Object" menu. 3. save and unzip docx. 4. modify word/rels/document.xml.rels 5. modify word/document.xml 6. zip...

CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2022-30190

CVE-2022-30190 Microsoft Office Word RCE Reproduction CVE-2022-30190 Vulnerability Overview MS Office docx files may contain external OLE object references as HTML files. There is an HTML scenario ms-msdt: that calls the msdt diagnostic tool, which is capable of executing arbitrary code specified...

CVE-2021-40444

Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Update 31/05/2022 - CVE-2022-30190 - Follina Now the generator is able to generate the document required to exploit also the "Follina"...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate .docx generate to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. creeate blank docx file. 2. add "Bitmap Iamge" object in "Inert/Object" menu. Add Object...

CVE-2021-40444

Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Background Although many PoC are already around the internet, I guessed to give myself a run to weaponizing this vulnerability, as what I...

CVE-2021-40444-exp

CVE-2021-40444 PoC 利用 CVE-2021-40444（Microsoft Office Word 远程代码执行）的恶意 docx 生成器 此脚本的创建基于对在野使用样本的部分逆向工程：938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52（docx 文件） 首先需要安装 lcab（sudo apt-get install lcab） 查看 REPRODUCE.md 获取手动复现步骤 如果生成的 cab 无法工作，请尝试将 exploit.html URL 指向 calc.cab 使用 首先根据给...

CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2021-40444

Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Background Although many PoC are already around the internet, I guessed to give myself a run to weaponizing this vulnerability, as what I...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

Security Updates for Microsoft Word Products (September 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-62804 - Heap-based buffer overflow in Microsoft...

CVE-2026-83951

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-83949

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-81952

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-80088

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-80090

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-80085

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-80079

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-80080

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...