Exploitation Summary
CVE-2026-21514 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added February 10, 2026. EIP tracks 1 public exploit from researchers including ChaitanyaHaritash.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2026-21514 and CVE-2026-21510, focusing on RTF and LNK file generation to bypass Protected View and achieve RCE. The scripts demonstrate technical details of the exploit chain, including obfuscation and payload delivery mechanisms.
Description
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
Exploits (1)
This repository contains functional exploit code for CVE-2026-21514 and CVE-2026-21510, focusing on RTF and LNK file generation to bypass Protected View and achieve RCE. The scripts demonstrate technical details of the exploit chain, including obfuscation and payload delivery mechanisms.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H