CVE Catalog
Actively exploited in the wild
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-09-16. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-43461
HighCVSS 8.8KEVExploitation Probability (EPSS)
Very high risk52.16%
99th percentile - higher than 99% of all known CVEs
Summary
A spoofing vulnerability in the Windows MSHTML platform.
Risk Assessment
An attacker could exploit this to impersonate trusted content or applications, potentially leading to phishing or malware infection.
Recommendation
Apply the security update released by Microsoft for this vulnerability.
Original NVD description (English source)
Windows MSHTML Platform Spoofing Vulnerability