[breach3d]

Hey BreachForums Community,

Today, I’m selling a 0-day vulnerability affecting Microsoft Word (latest version).

Discovered by: breach3d (LAPSUS$ member)

Description:
The vulnerability affects a DLL module that Microsoft Word loads without proper verification, due to the absence of absolute path validation.

Contact : On Forum

[StanMalice]

i'll never be able to afford that but well played

[3vx4fl6fa]

Sound like BS? how would you even have a LPE in word, a process that doesn't run as admin unless people are insane? And RCE with DLL hijacking? Sound very much not like _REMOTE_ code execution? Do you have any better proof?