Actively exploited in the wild
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-07-09. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-38112
HighCVSS 7.5KEVSummary
A vulnerability in the Windows MSHTML Platform allows for spoofing. The NVD description does not provide technical details or attack vectors.
Risk Assessment
Successful exploitation could allow an attacker to mislead the user and perform actions in their context, potentially leading to system compromise.
Recommendation
Immediately apply the security updates provided by Microsoft for the Windows MSHTML Platform.
Other vulnerabilities in Windows MSHTML Platform
See all- CVE-2024-30040HighActively exploited
A vulnerability in the Windows MSHTML platform allows a security feature bypass. Technical details are not disclosed in the description.
- CVE-2021-33742HighActively exploited
Windows MSHTML Platform Remote Code Execution Vulnerability. Technical details are not provided in the description.
- CVE-2023-21805High
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit it to run arbitrary code in the context of the logged-on user.
Original NVD description (English source)
Windows MSHTML Platform Spoofing Vulnerability