Vulnerability Spotlight: Vulnerability in Hancom Office could lead to memory corruption, code execution
Summary: Cisco Talos discovered a heap-based buffer overflow in Hancom Office's HwordApp.dll, tracked as TALOS-2021-1386 (CVE-2021-21958), which a malicious document could trigger to cause memory corruption or remote code execution. Talos confirmed Hancom Office 2020 version 11.0.0.2353 is exploitable, worked with Hancom on an update, and published Snort rules 58365 and 58366 to detect exploitation attempts.
Why it matters: A document opened in a widely used South Korean office suite is enough to hand an attacker code execution, and detection rests on two Snort signatures that Talos says may change as more vulnerability information emerges.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-21958
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026