Windows Tooling Updates: Ole View.NET
Summary: Google Project Zero's James Forshaw released version 1.16 of OleView.NET, a tool for discovering the attack surface of Windows COM and finding vulnerabilities such as privilege escalation and remote code execution, with updates presented at the Microsoft Bluehat conference under the name "DCOM Research for Everyone!". The update adds the ability to convert interface metadata into readable source code and to invoke methods on exposed COM interfaces, using a repurposed RPC client built from parsed NDR data rather than native marshaling code.
What's compelling: COM interfaces on Windows are a documented path to privilege escalation and remote code execution, and a free tool that turns interface metadata into callable code lowers the reverse-engineering effort for anyone probing that surface, including attackers.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026