CVE-2026-21509
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
- Affected products
- Office
- Microsoft 365 Apps
- All versions
- Microsoft Office
- = 2016, 2019
- Microsoft Office Long Term Servicing Channel
- = 2021, 2024
- CVSS 3.1
- 7.8 HIGH
- EPSS
- 72.6% (99th percentile)
- Weakness
- CWE-807
- NVD status
- Analyzed
- Published
- 2026-01-26
CVE-2026-21509 at NVD
29 known exploits for CVE-2026-21509
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-2026-21509-handler
KSK-ITDK-CVE-2026-21509-Mitigation
detect_CVE-2026-21509
SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass-
CTT-NFS-Vortex-RCE
CTT-MICROSOFT-OFFICE-OLE-MANIFOLD-BYPASS-CVE-2026-21509
CVE-2026-21509-POC
RightHand-Persistence
cve-2026-21509-mitigation
Ashwesker-CVE-2026-21509
CVE-2026-21509
CVE-2026-21509-PoC
CVE-2026-21509
cve-2026-21509-office_security_bypass_reproduction
cve-2026-poc-collection
cve-2026-poc-collection
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
cve-2026-poc-collection
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
Exploit for CVE-2026-21509
Exploit for CVE-2026-21509