Microsoft MSHTML Remote Code Execution Vulnerability

🗓️ 07 Sep 2021 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 276 Views

Microsoft investigating remote code execution vulnerability in MSHTML affecting Microsoft Windows. Attackers use specially-crafted Office documents to exploit the vulnerability

Reporter	Title	Published	Views	Family All 153
Gitee	Exploit for Path Traversal in Microsoft	3 Oct 202120:23	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	6 Sep 202500:58	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	6 Sep 202500:46	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	8 Oct 202115:46	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	6 Nov 202103:51	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	12 Sep 202112:47	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	9 Oct 202114:52	–	gitee
0day.today	Microsoft Office Word MSHTML Remote Code Execution Exploit	9 Dec 202100:00	–	zdt
GithubExploit	Exploit for CVE-2022-30190	31 May 202214:10	–	githubexploit
GithubExploit	Exploit for Path Traversal in Microsoft	5 Jun 202302:27	–	githubexploit

Vulners

Node

microsoft windows_7_for_x64-based_systems_service_pack_1Range<6.1.7601.25712

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1Range<6.1.7601.26221

OR

microsoft windows_7_for_32-bit_systems_service_pack_1Range<6.1.7601.25712

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1Range<6.1.7601.26221

OR

microsoft windows_server_2012_r2_(server_core_installation)Range<6.3.9600.20120

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2Range<6.3.9600.20120

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)Range<6.2.9200.23462

OR

microsoft windows_server_2012_(server_core_installation)Range<v1.001

OR

microsoft windows_server_2012Range<6.2.9200.23462

OR

microsoft windows_server_2012Range<v1.001

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)Range<6.1.7601.25712

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1Range<6.1.7601.25712

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)Range<6.0.6003.21218

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2Range<6.0.6003.21218

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)Range<6.0.6003.21218

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2Range<6.0.6003.21218

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1Range<6.3.9600.20120

OR

microsoft windows_8.1_for_x64-based_systemsRange<6.3.9600.20120

OR

microsoft windows_8.1_for_x64-based_systemsRange<6.3.9600.20120

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systemsRange<6.3.9600.20120

OR

microsoft windows_8.1_for_32-bit_systemsRange<6.3.9600.20120

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_server_2016_(server_core_installation)Range<10.0.14393.4651

OR

microsoft windows_server_2016Range<10.0.14393.4651

OR

microsoft windows_10_version_1607_for_x64-based_systemsRange<10.0.14393.4651

OR

microsoft windows_10_version_1607_for_32-bit_systemsRange<10.0.14393.4651

OR

microsoft windows_10_for_x64-based_systemsRange<10.0.10240.19060

OR

microsoft windows_10_for_32-bit_systemsRange<10.0.10240.19060

OR

microsoft windows_server,_version_20h2_(server_core_installation)Range<10.0.19042.1237

OR

microsoft windows_10_version_20h2_for_arm64-based_systemsRange<10.0.19042.1237

OR

microsoft windows_10_version_20h2_for_32-bit_systemsRange<10.0.19042.1237

OR

microsoft windows_10_version_20h2_for_x64-based_systemsRange<10.0.19042.1237

OR

microsoft windows_server,_version_2004_(server_core_installation)Range<10.0.19041.1237

OR

microsoft windows_10_version_2004_for_x64-based_systemsRange<10.0.19041.1237

OR

microsoft windows_10_version_2004_for_arm64-based_systemsRange<10.0.19041.1237

OR

microsoft windows_10_version_2004_for_32-bit_systemsRange<10.0.19041.1237

OR

microsoft windows_server_2022_(server_core_installation)Range<10.0.20348.230

OR

microsoft windows_server_2022Range<10.0.20348.230

OR

microsoft windows_10_version_21h1_for_32-bit_systemsRange<10.0.19043.1237

OR

microsoft windows_10_version_21h1_for_arm64-based_systemsRange<10.0.19043.1237

OR

microsoft windows_10_version_21h1_for_x64-based_systemsRange<10.0.19043.1237

OR

microsoft windows_10_version_1909_for_arm64-based_systemsRange<10.0.18363.1801

OR

microsoft windows_10_version_1909_for_x64-based_systemsRange<10.0.18363.1801

OR

microsoft windows_10_version_1909_for_32-bit_systemsRange<10.0.18363.1801

OR

microsoft windows_server_2019_(server_core_installation)Range<10.0.17763.2183

OR

microsoft windows_server_2019Range<10.0.17763.2183

OR

microsoft windows_10_version_1809_for_arm64-based_systemsRange<10.0.17763.2183

OR

microsoft windows_10_version_1809_for_x64-based_systemsRange<10.0.17763.2183

OR

microsoft windows_10_version_1809_for_32-bit_systemsRange<10.0.17763.2183

16 Aug 2022 07:00Current

0.6Low risk

Vulners AI Score0.6

CVSS 26.8

CVSS 3.17.8 - 8.8

CVSS 38.8

EPSS0.96843

SSVC

microsoft mshtml remote code execution vulnerability windows office documents activex control user rights defender antivirus defender for endpoint detection protection security update mitigations workaround security updates faq