84 matches found
CVE-2025-21298
CVE-2025-21298 Содержание Этот репозиторий содержит доказательство концепции PoC для CVE-2025-21298 – уязвимость удалённого выполнения кода в OLE Windows CVSS 9.8. Это PoC повреждения памяти , а не эксплойт. Уязвимость Уязвимость находится в ole32.dll!UtOlePresStmToContentsStm. Назначение функции...
Zero-Click-RCE-Incident-Response-CVE-2025-21298
침해사고 대응: Windows OLE 제로클릭 RCE CVE-2025-21298 프로젝트 개요 이 프로젝트는 치명적Critical 심각도의 제로클릭 원격 코드 실행RCE 시도에 대한 종단 간 조사 및 차단 과정을 문서화한 것입니다. EDR 텔레메트리와 위협 인텔리전스를 활용하여 자동화된 방어 체계를 우회하고 명령 및 제어C2 통신을 수립한 "Living off the Land"LotL 공격을 식별했습니다. 주요 목표 제로데이 익스플로잇에 대한 우선순위 높은 SIEM 알림 트리아지 수행. 무기화된 RTF 첨부 파일에 대한 정적 ...
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- 악성 RTF 첨부 파일을 통해 전달된 Windows OLE 제로클릭 RCE 악용CVE-2025-21298을 보고하는 중요 알림을 조사해야 합니다. LetsDefend 알림 조사 2025년 2월 4일 16:18, Austin @ letsdefend.io가 이메일을 수신한 후 보안 알림이 트리거되었습니다. 메시지는 projectmanagement @ pm.me에서 발송되었으며 첨부 파...
SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
SOC336 - Обнаружена эксплуатация Windows OLE Zero-Click RCE CVE-2025-21298 - Пошаговое руководство 🔎 Содержание 1. Ситуация...
Vulnerabilities in SQL Server
Microsoft has identified 62 vulnerabilities in various components of SQL Server. Malicious actors could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the table below. CVE-2026-67643 | 8.80 | Execution of arbitrary code | CVE-2026-67645 | 6.50 | Access to...
CVE-2026-78442
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
CVE-2026-78441
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73796
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-78442
CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...
CVE-2026-78441
CVE-2026-78441 is an out-of-bounds read vulnerability in Windows OLE DB that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N — indicating network reachability, low complexity, no priv...
EUVD-2026-73795
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
LetsDefend SOC336: Обнаружена эксплуатация Windows OLE с нулевым кликом RCE В этом репозитории описано мое расследование оповещения LetsDefend, связанного с эксплуатацией уязвимости удаленного выполнения кода с нулевым кликом в Windows OLE CVE-2025-21298. Цель — показать ход рассуждений, приведши...
CVE-2025-21298
Содержание Это доказательство концепции для CVE-2025-21298 - Уязвимость удаленного выполнения кода в Windows OLE CVSS 9.8. Это доказательство концепции повреждения памяти , а не эксплойт. Полный дифф патча через ghidriff: ССЫЛКА уязвимость Уязвимость находится в ole32.dll!UtOlePresStmToContentsSt...
CVE-2026-50344
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally...
EUVD-2026-22388
Access of resource using incompatible type 'type confusion' in Windows OLE allows an authorized attacker to elevate privileges locally...
PT-2026-32740
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A type confusion issue in Windows OLE allows an authorized attacker to access resources using an incompatible type, which can lead to local privilege escalation. Recommendations At the moment...
CVE-2025-60714
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally...
CVE-2025-60714
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally...
