CVE-2021-34534
MediumCVSS 6.8Exploitation Probability (EPSS)
High risk78th percentile - higher than 78% of all known CVEs
Summary
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
Risk Assessment
Risk of system compromise, which could lead to data theft or malware installation.
Recommendation
Install the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows MSHTML
See all- CVE-2024-43461HighActively exploited
A spoofing vulnerability in the Windows MSHTML platform.
- CVE-2023-32046HighActively exploited
Windows MSHTML Platform Elevation of Privilege Vulnerability. Technical details are not provided in the description.
- CVE-2021-34447Medium
A remote code execution vulnerability in the Windows MSHTML platform allows an attacker to execute arbitrary code in the context of the logged-on user. The attack can be carried out via a specially crafted web page or document.
- CVE-2021-34497Medium
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
Original NVD description (English source)
Windows MSHTML Platform Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS