Actively exploited in the wild
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2023-07-11. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
CVE-2023-32046
HighCVSS 7.8KEVSummary
Windows MSHTML Platform Elevation of Privilege Vulnerability. Technical details are not provided in the description.
Risk Assessment
An attacker could elevate their privileges on the system, potentially leading to device compromise.
Recommendation
Apply Windows security updates provided by Microsoft. Restrict access to untrusted web content.
Other vulnerabilities in Windows MSHTML
See all- CVE-2024-43461HighActively exploited
A spoofing vulnerability in the Windows MSHTML platform.
- CVE-2021-34534Medium
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
- CVE-2021-34447Medium
A remote code execution vulnerability in the Windows MSHTML platform allows an attacker to execute arbitrary code in the context of the logged-on user. The attack can be carried out via a specially crafted web page or document.
- CVE-2021-34497Medium
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
Original NVD description (English source)
Windows MSHTML Platform Elevation of Privilege Vulnerability