XPost: alt.comp.os.windows-11   
   From: toylet.toylet@gmail.com   
      
   Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for   
   Active Exploitation   
      
      
   Microsoft on Monday issued out-of-band security patches for a   
   high-severity Microsoft Office zero-day vulnerability exploited in attacks.   
      
   The vulnerability, tracked as CVE-2026-21509, carries a CVSS score of   
   7.8 out of 10.0. It has been described as a security feature bypass in   
   Microsoft Office.   
      
   "Reliance on untrusted inputs in a security decision in Microsoft Office   
   allows an unauthorized attacker to bypass a security feature locally,"   
   the tech giant said in an advisory.   
      
   "This update addresses a vulnerability that bypasses OLE mitigations in   
   Microsoft 365 and Microsoft Office, which protect users from vulnerable   
   COM/OLE controls."   
      
   Successful exploitation of the flaw relies on an attacker sending a   
   specially crafted Office file and convincing recipients to open it. It   
   also noted that the Preview Pane is not an attack vector.   
      
   ... more ....   
      
      
   Related:   
      
   Office 漏洞正被黑客大量利用 2016、2019、2021、365 全中招 -   
   電腦領域 HKEPC Hardware   
   - 全港 No.1 PC網站   
      
      
   --   
      @~@   Simplicity is Beauty! Remain silent! Drink, Blink, Stretch!   
     / v \  May the Force and farces be with you! Live long and prosper!!   
   /( _ )\ https://sites.google.com/site/changmw/   
      ^ ^   https://github.com/changmw/changmw   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)