CVE-2021-26618

CVE-2021-26618 describes an improper input validation vulnerability in ToWord within ToOffice, affecting both Microsoft and Tmax versions on Windows. This critical vulnerability (CVSS 9.8) allows remote attackers to create arbitrary files, potentially including malicious code, leading to complete compromise of confidentiality, integrity, and availability. Despite its high severity and ease of exploitation (low attack complexity, no user interaction required), there is currently no evidence of active exploitation, public exploit code, or significant community discussion.