decalage2/detect_CVE-2026-21509

PoC

YARA rule and python script to detect potential exploits for the CVE-2026-21509 vulnerability in MS Office

view exploit source poc_in_githubauthor decalage2published 2026-02-04catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-21509US—OT criticalKEV
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan