Actively exploited in the wild
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-33742
HighCVSS 7.5KEVSummary
Windows MSHTML Platform Remote Code Execution Vulnerability. Technical details are not provided in the description.
Risk Assessment
May allow a remote attacker to execute arbitrary code in the user's context, leading to system compromise.
Recommendation
Apply Microsoft security updates for the MSHTML platform and keep Windows systems up to date.
Other vulnerabilities in Windows MSHTML Platform
See all- CVE-2024-38112HighActively exploited
A vulnerability in the Windows MSHTML Platform allows for spoofing. The NVD description does not provide technical details or attack vectors.
- CVE-2024-30040HighActively exploited
A vulnerability in the Windows MSHTML platform allows a security feature bypass. Technical details are not disclosed in the description.
- CVE-2023-21805High
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit it to run arbitrary code in the context of the logged-on user.
Original NVD description (English source)
Windows MSHTML Platform Remote Code Execution Vulnerability