Vulnerability Spotlight: Multiple Arbitrary Code Execution Vulnerabilities Identified in Hancom Hangul Office
Summary: Cisco Talos identified 8 arbitrary code execution vulnerabilities in Hancom Hangul Office, and Hancom has released a software update addressing them. Hancom Office is the South Korean government's official productivity suite and holds roughly 30% of the country's productivity suite market share, and North Korean government-backed attacks have previously exploited Hangul word processor vulnerabilities in incidents documented in 2013 and 2015.
Why it matters: A productivity suite used across South Korean government systems and public institutions carries 8 code execution flaws, and the North Korean government is believed to have exploited Hangul vulnerabilities before - so patch status on Hancom installs is a nation-state exposure question, not a routine update.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026