cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office 安全功能绕过 CVE-2026-21509 是一个 Microsoft Office 安全功能绕过漏洞 CVSS 7.8 ，被 APT28（俄罗斯黑客组织） 积极利用攻击乌克兰 安全决策中依赖不可信输入（CWE-807 ）——"破坏 kill bit" 允许通过恶意文档绕过受保护视图 和OLE 缓解措施 影响 Office 2016、2019、2021、2024、Microsoft 365 应用 2026年1月 发布紧急带外补丁 概述 CVE-2026-21509 是 Microsoft Office...

Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation

Microsoft on Monday issued out-of-band security patches for a high-severity Microsoft Office zero-day vulnerability exploited in attacks. The vulnerability, tracked as CVE-2026-21509 , carries a CVSS score of 7.8 out of 10.0. It has been described as a security feature bypass in Microsoft Office...