Back to the CVE list
CVE-2025-21298

Windows OLE Remote Code Execution Vulnerability

CVSS score

9.8

EPSS probability

%80.9

Risk score

7.9

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Proof of concept & details for CVE-2025-21298 (★0)

Public PoCSource updated: 21.01.2025 03:22:29

A Critical Windows OLE Zero-Click Vulnerability (★0)

Public PoCSource updated: 08.03.2025 02:20:41

A safe CTF challenge demonstrating CVE-2025-21298 using RTF and OLE objects. (★0)

Public PoCSource updated: 28.03.2025 12:39:41

CVE-2025-21298 (★0)

Public PoCSource updated: 09.08.2025 20:33:27

We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation (CVE-2025-21298) delivered via a malicious RTF attachment. (★0)

Public PoCSource updated: 12.10.2025 18:07:03

Technical investigation and host containment of a Critical-severity Zero-Click RCE exploit (CVE-2025-21298) using EDR telemetry and static malware analysis. (★0)

Public PoCSource updated: 24.03.2026 20:20:32

LetsDefend SOC336 case study on CVE-2025-21298 (★0)

Public PoCSource updated: 05.05.2026 04:03:20

SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298) Walkthrough (★0)

Public PoCSource updated: 28.05.2026 16:14:44

LetsDefend SOC lab investigating CVE-2025-21298 Windows OLE Zero-Click RCE exploitation. (★0)

Public PoCSource updated: 26.09.2026 01:24:24

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-21298"