CVE-2021-34497
MediumCVSS 6.8Exploitation Probability (EPSS)
High risk77th percentile - higher than 77% of all known CVEs
Summary
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
Risk Assessment
Risk of system compromise, which could lead to data theft or malware installation.
Recommendation
Install the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows MSHTML
See all- CVE-2024-43461HighActively exploited
A spoofing vulnerability in the Windows MSHTML platform.
- CVE-2023-32046HighActively exploited
Windows MSHTML Platform Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2021-34534Medium
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
- CVE-2021-34447Medium
A remote code execution vulnerability in the Windows MSHTML platform allows an attacker to execute arbitrary code in the context of the logged-on user. The attack can be carried out via a specially crafted web page or document.
Original NVD description (English source)
Windows MSHTML Platform Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS