CVE-2023-21805
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit it to run arbitrary code in the context of the logged-on user.
Risk Assessment
Risk of remote system compromise if a user visits a malicious website or opens a malicious document.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows MSHTML Platform
See all- CVE-2024-43573MediumActively exploited
A spoofing vulnerability exists in the Windows MSHTML Platform. It could allow an attacker to display fake content or interfaces to the user.
- CVE-2024-38112HighActively exploited
A vulnerability in the Windows MSHTML Platform allows for spoofing. The NVD description does not provide technical details or attack vectors.
- CVE-2024-30040HighActively exploited
A vulnerability in the Windows MSHTML platform allows a security feature bypass. Technical details are not disclosed in the description.
- CVE-2021-33742HighActively exploited
Windows MSHTML Platform Remote Code Execution Vulnerability. Technical details are not provided in the description.
Original NVD description (English source)
Windows MSHTML Platform Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS