CVE-2023-21805
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit it to run arbitrary code in the context of the logged-on user.
Risk Assessment
Risk of remote system compromise if a user visits a malicious website or opens a malicious document.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows MSHTML Platform
See all- CVE-2024-38112HighActively exploited
A vulnerability in the Windows MSHTML Platform allows for spoofing. The NVD description does not provide technical details or attack vectors.
- CVE-2024-30040HighActively exploited
A vulnerability in the Windows MSHTML platform allows a security feature bypass. Technical details are not disclosed in the description.
- CVE-2021-33742HighActively exploited
Windows MSHTML Platform Remote Code Execution Vulnerability. Technical details are not provided in the description.
Original NVD description (English source)
Windows MSHTML Platform Remote Code Execution Vulnerability