Exploitation for Client Execution

Adversaries may exploit software vulnerabilities in client applications to execute code. This includes browser, Office, and other client software, but the specific behavior depends on the affected application and vulnerability. Internet-delivered variants can use a malicious or compromised site visited by a vulnerable browser or a link or document that the target opens; required user action varies by the application and vulnerability. Initial-access delivery and follow-on payload execution are separate behaviors. This record is a taxonomy summary, not a generic exploit procedure; use a separate, authorized, CVE-specific validation plan for operator actions.