Pope Follina I

Encyclical

"Documentum Diagnosticum". A Word document called the MSDT diagnostic tool through an ms-msdt: URL and ran code with no macros at all, even in the preview pane. Reported back in April and first judged not a security issue, it went public on 27 May thanks to nao_sec and was fixed in June. The year taught that every registered protocol handler is a door, and that dismissed reports deserve a second reading.

Saint page: Saint Follina, Who Opened Word and Called Diagnostics

Cardinals

Saint Spring4Shell, Who Bloomed in the Bindings · Saint ProxyNotShell, Who Was Not ProxyShell · Saint PwnKit, Who Gave Root to Passers-by