CVE Catalog

CVE-2021-34497

MediumCVSS 6.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
1.83%

77th percentile - higher than 77% of all known CVEs

Summary

Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.

Risk Assessment

Risk of system compromise, which could lead to data theft or malware installation.

Recommendation

Install the latest Windows security updates that address this vulnerability.

Original NVD description (English source)

Windows MSHTML Platform Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS