CVE-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability

Recent assessments:

JunquerGJ at September 07, 2021 10:50pm UTC reported:

• Vulnerable if default behaviour has been changed ( By default, Microsoft Office opens documents from the internet in Protected View or Application Guard for Office both of which prevent the current attack )

• Requires social engineering to be exploited

• Workaround easy to deploy

ccondon-r7 at September 07, 2021 7:12pm UTC reported:

• Vulnerable if default behaviour has been changed ( By default, Microsoft Office opens documents from the internet in Protected View or Application Guard for Office both of which prevent the current attack )

• Requires social engineering to be exploited

• Workaround easy to deploy

nu11secur1ty at September 22, 2021 4:28pm UTC reported:

• Vulnerable if default behaviour has been changed ( By default, Microsoft Office opens documents from the internet in Protected View or Application Guard for Office both of which prevent the current attack )

• Requires social engineering to be exploited

• Workaround easy to deploy

NinjaOperator at September 07, 2021 6:45pm UTC reported:

• Vulnerable if default behaviour has been changed ( By default, Microsoft Office opens documents from the internet in Protected View or Application Guard for Office both of which prevent the current attack )

• Requires social engineering to be exploited

• Workaround easy to deploy

Assessed Attacker Value: 3
Assessed Attacker Value: 3Assessed Attacker Value: 2