CVE-2025-21298
Windows OLE Remote Code Execution Vulnerability
CRITICAL 9.8EPSS 80.9%
Windows OLE Remote Code Execution Vulnerability
- Affected
- Microsoft · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 22H2
- CVSS v3.1 MICROSOFT
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 80.91% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2025-01-14
- Updated
- 2026-06-09
Proof-of-concept exploits (7)
- Dit-Developers/CVE-2025-212981★ · 2025-03-07
- fy-poc/full-poc-CVE-2025_212981★ · 2025-09-22
- ynwarcs/CVE-2025-21298197★ · 2025-01-20
- C-G-creator/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-2…0★ · 2026-05-04
- TheBl4ckPh4nt0m/CVE-2025-212981★ · 2025-03-07
- IsMyPhonePwned/mimic4★ · 2026-02-05
- f-marra/LetsDefend0★ · 2026-06-27