71 matches found
CVE-2026-50344
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally...
EUVD-2026-22388
Access of resource using incompatible type 'type confusion' in Windows OLE allows an authorized attacker to elevate privileges locally...
PT-2026-32740
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A type confusion issue in Windows OLE allows an authorized attacker to access resources using an incompatible type, which can lead to local privilege escalation. Recommendations At the moment...
CVE-2025-60714
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally...
CVE-2025-60714
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally...
Exploit for Use After Free in Microsoft
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Dete...
EUVD-2024-37125
Malicious code in bioql PyPI...
EUVD-2024-19144
Malicious code in bioql PyPI...
EUVD-2024-19084
Malicious code in bioql PyPI...
EUVD-2023-39326
Malicious code in bioql PyPI...
EUVD-2024-28014
Malicious code in bioql PyPI...
CVE-2020-1281
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'...
About Remote Code Execution – Windows OLE (CVE-2025-21298) vulnerability
About Remote Code Execution - Windows OLE CVE-2025-21298 vulnerability. The vulnerability is from the January Microsoft Patch Tuesday. OLE Object Linking and Embedding is a technology for linking and embedding objects into other documents and objects, developed by Microsoft. A common use of this...
Exploit for Use After Free in Microsoft
content This is a proof-of-concept for CVE-2025-21298 - Wind...
CVE-2025-21298
Windows OLE Remote Code Execution Vulnerability...
CVE-2025-21298 Windows OLE Remote Code Execution Vulnerability
...
CVE-2025-21298
CVE-2025-21298 is a Windows OLE use-after-free memory corruption vulnerability in ole32.dll (UtOlePresStmToContentsStm) that enables remote code execution via specially crafted RTF, including zero-click scenarios when previews are shown in Outlook. The issue arises from a double-free of the CONTE...
Windows OLE Remote Code Execution Vulnerability
...
PT-2025-1193
Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions prior to the fixed version Description The vulnerability is a zero-click remote code execution RCE flaw in Microsoft Outlook, caused by a memory corruption issue in the UtOlePresStmToContentsStm function of the...