CVE Catalog
CVE-2021-34447
MediumCVSS 6.8Exploitation Probability (EPSS)
High risk1.76%
76th percentile - higher than 76% of all known CVEs
Summary
A remote code execution vulnerability in the Windows MSHTML platform allows an attacker to execute arbitrary code in the context of the logged-on user. The attack can be carried out via a specially crafted web page or document.
Risk Assessment
The risk includes full compromise of the user's system, potentially leading to data theft, malware installation, and privilege escalation.
Recommendation
It is recommended to urgently install Windows updates and limit the use of browsers and applications that rely on MSHTML.
Original NVD description (English source)
Windows MSHTML Platform Remote Code Execution Vulnerability

