107 matches found
SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
SOC336 - Windows OLE Zero-Click RCE Exploitation Detected CVE-2025-21298 Walkthrough 🔎 Table of Content 1. Situation 2. Alert Overview 3. Tools Used 4. Analysis Email Security Log Management Proxy Log Endpoint Security Terminal History Network Action Processes CVE-2025-21298 Playbook Analyst Note...
CVE-2025-21298
content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. Full patch diff via ghidriff: LINK vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of...
Zero-Click-RCE-Incident-Response-CVE-2025-21298
Incident Response: Windows OLE Zero-Click RCE CVE-2025-21298 Project Overview This project documents the end-to-end investigation and containment of a Critical-severity Zero-Click Remote Code Execution RCE attempt. Using EDR telemetry and threat intelligence, I identified a "Living off the Land"...
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Detected This repository documents my investigation of a LetsDefend alert involving a Windows OLE zero-click remote code execution exploit tied to CVE-2025-21298. The goal is to show the reasoning behind the conclusion, from email triage ...
CVE-2025-21298
CVE-2025-21298 content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of the function is ti...
CVE-2026-70138
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...
CVE-2026-70059
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...
CVE-2026-70059
A Heap-based buffer overflow exists in Windows OLE that can be exploited by an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or remediation details are provided in the documents beyond the impact of local privilege elevation. Exploit infor...
CVE-2026-70210: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-96924: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network...
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation CVE-2025-21298 delivered via a malicious RTF attachment. Investigation of the alert from LetsDefend On 4 February...
Microsoft SQL Server (September 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. CVE-2026-77482 - Integer overflow or wraparound ...
Microsoft SQL Server (September 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. CVE-2026-77482 - Integer overflow or wraparound ...
Vulnerabilities in SQL Server
Microsoft has identified 62 vulnerabilities in various components of SQL Server. Malicious actors could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the table below. CVE-2026-67643 | 8.80 | Execution of arbitrary code | CVE-2026-67645 | 6.50 | Access to...
CVE-2026-78442
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
CVE-2026-78441
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73795
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
CVE-2026-78442
CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...
CVE-2026-78441
CVE-2026-78441 is an out-of-bounds read vulnerability in Windows OLE DB that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N — indicating network reachability, low complexity, no priv...