tag
Initial-Access
High
Windows ShellLink (.lnk) Remote Code Execution — CVE-2026-21510 LNK-Stomping Generator
CVE-2026-21510·
Windows Shell Link (.lnk) parsing (MS-SHLLINK)
unpatched
High
RTF Protected-View Bypass (CVE-2026-21514) Chained with ShellLink RCE (CVE-2026-21510) — Builder Scripts
CVE-2026-21514, CVE-2026-21510·
Microsoft Office (RTF/Word rendering + Protected View) and Windows Shell Link (.lnk) handling
unpatched