101 matches found
CVE-2025-21298
CVE-2025-21298 contenido Esta es una prueba de concepto para CVE-2025-21298 - Vulnerabilidad de ejecución remota de código en Windows OLE CVSS 9.8. Se trata de una PoC de corrupción de memoria , no de un exploit. vulnerabilidad La vulnerabilidad se encuentra en ole32.dll!UtOlePresStmToContentsStm...
Zero-Click-RCE-Incident-Response-CVE-2025-21298
Incident Response: Windows OLE Zero-Click RCE CVE-2025-21298 Project Overview This project documents the end-to-end investigation and containment of a Critical-severity Zero-Click Remote Code Execution RCE attempt. Using EDR telemetry and threat intelligence, I identified a "Living off the Land"...
SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
SOC336 - Detección de Explotación RCE Zero-Click OLE de Windows CVE-2025-21298 Walkthrough 🔎 Tabla de Contenido 1. Situación 2. Resumen de la Alerta 3. Herramientas Utilizadas 4. Análisis Seguridad del Correo Electrónico Gestión de Registros Registro de Proxy Seguridad del Endpoint Historial del...
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
LetsDefend SOC336: Explotación RCE Zero-Click OLE de Windows Detectada Este repositorio documenta mi investigación de una alerta de LetsDefend que involucra una explotación de ejecución remota de código zero-click OLE de Windows vinculada a CVE-2025-21298. El objetivo es mostrar el razonamiento...
CVE-2025-21298
content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. Full patch diff via ghidriff: LINK vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of...
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation CVE-2025-21298 delivered via a malicious RTF attachment. Investigation of the alert from LetsDefend On 4 February...
Microsoft SQL Server (September 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. CVE-2026-77482 - Integer overflow or wraparound ...
Microsoft SQL Server (September 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. CVE-2026-77482 - Integer overflow or wraparound ...
Vulnerabilities in SQL Server
Microsoft has identified 62 vulnerabilities in various components of SQL Server. Malicious actors could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the table below. CVE-2026-67643 | 8.80 | Execution of arbitrary code | CVE-2026-67645 | 6.50 | Access to...
CVE-2026-78442
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
CVE-2026-78441
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-78441
CVE-2026-78441 is an out-of-bounds read vulnerability in Windows OLE DB that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N — indicating network reachability, low complexity, no priv...
EUVD-2026-73796
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-78442
CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...
EUVD-2026-73795
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
Windows OLE DB Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
Windows OLE DB Information Disclosure Vulnerability
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-78442: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
