Actively exploited in the wild
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-10-08. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-43573
MediumCVSS 6.5KEVSummary
A spoofing vulnerability exists in the Windows MSHTML Platform. It could allow an attacker to display fake content or interfaces to the user.
Risk Assessment
An attacker could exploit this to trick users, for example via fake login pages, potentially leading to credential theft.
Recommendation
Immediately install the latest Windows security updates provided by Microsoft.
Other vulnerabilities in Windows MSHTML Platform
See all- CVE-2024-38112HighActively exploited
A vulnerability in the Windows MSHTML Platform allows for spoofing. The NVD description does not provide technical details or attack vectors.
- CVE-2024-30040HighActively exploited
A vulnerability in the Windows MSHTML platform allows a security feature bypass. Technical details are not disclosed in the description.
- CVE-2021-33742HighActively exploited
Windows MSHTML Platform Remote Code Execution Vulnerability. Technical details are not provided in the description.
- CVE-2023-21805High
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit it to run arbitrary code in the context of the logged-on user.
Original NVD description (English source)
Windows MSHTML Platform Spoofing Vulnerability