Actively exploited in the wild
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-05-14. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-30040
HighCVSS 8.8KEVSummary
A vulnerability in the Windows MSHTML platform allows a security feature bypass. Technical details are not disclosed in the description.
Risk Assessment
An attacker could exploit this vulnerability to bypass browser security and execute malicious code in the user's context, potentially leading to system infection.
Recommendation
Install the latest Windows security updates from Microsoft. Restrict use of Internet Explorer/Edge in MSHTML mode if possible.
Other vulnerabilities in Windows MSHTML Platform
See all- CVE-2024-38112HighActively exploited
A vulnerability in the Windows MSHTML Platform allows for spoofing. The NVD description does not provide technical details or attack vectors.
- CVE-2021-33742HighActively exploited
Windows MSHTML Platform Remote Code Execution Vulnerability. Technical details are not provided in the description.
- CVE-2023-21805High
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit it to run arbitrary code in the context of the logged-on user.
Original NVD description (English source)
Windows MSHTML Platform Security Feature Bypass Vulnerability