GHSA-ch84-h92g-mw93

Exploit Intelligence

• sentinel-aidefense/CVE-2026-21509 (github-poc-repo)
• sentinel-aidefense/CVE-2026-21509 (github-poc-repo)
• sentinel-aidefense/CVE-2026-21509 (github-poc)
• sentinel-aidefense/CVE-2026-21509 (github-poc)
• PowerShell script to check, apply, and test the Kill-Bit protection for the CVE-2026-21509 Microsoft Office zero-day vulnerability affecting Office 2016/2019/LTSC. (github-poc-repo)
• PowerShell script to check, apply, and test the Kill-Bit protection for the CVE-2026-21509 Microsoft Office zero-day vulnerability affecting Office 2016/2019/LTSC. (github-poc-repo)
• Microsoft just released emergency patches for CVE-2026-21509, a zero-day in the Office Suite that bypasses OLE/COM mitigations when a user simply opens a file. They think their "Service-side change" for Office 2021+ is a solid wall. (github-poc-repo)
• Microsoft just released emergency patches for CVE-2026-21509, a zero-day in the Office Suite that bypasses OLE/COM mitigations when a user simply opens a file. They think their "Service-side change" for Office 2021+ is a solid wall. (github-poc-repo)
• 2026-01-28.yml (github-poc)
• integration_test.go (github-poc)

…and 48 more exploits

Timeline

• CVE Published
• Jul 2, 2021 PoC Published
• Feb 4, 2026 PoC Published
• Feb 14, 2026 PoC Published
• Apr 1, 2026 PoC Published
• Apr 10, 2026 Security Advisory
• Apr 16, 2026 PoC Published