446 matches found
Talos release protection against zero-day vulnerability in Microsoft MSHTML
Cisco Talos released new SNORT® rules Thursday to protect against the exploitation of a zero-day vulnerability in Microsoft MSHTML that the company warns is being actively exploited in the wild. Users are encouraged to deploy SIDs 58120 – 58129, Snort 3 SID 300049 and ClamAV... This is only the...
Threat Source newsletter (Sept. 9, 2021)
Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers. The biggest security news this week is no doubt another Microsoft zero-day. On the heels of PrintNightmare and multiple Exchange Server vulnerabilities comes a code execution vulnerability in MSHTML, the rendering engine... This is...
Microsoft Internet Explorer MSHTML Remote Code Execution (CVE-2021-40444)
A remote code execution vulnerability exists in Microsoft Internet Explorer MSHTML. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
[updated] Windows MSHTML zero-day actively exploited, mitigations required
Several researchers have independently reported a 0-day remote code execution vulnerability in MSHTML to Microsoft. The reason it was reported by several researchers probably lies in the fact that a limited number of attacks using this vulnerability have been identified, as per Microsoft’s securi...
New 0-Day Attack Targeting Windows Users With Microsoft Office Documents
Microsoft on Tuesday warned of an actively exploited zero-day flaw impacting Internet Explorer that's being used to hijack vulnerable Windows systems by leveraging weaponized Office documents. Tracked as CVE-2021-40444 CVSS score: 8.8, the remote code execution flaw is rooted in MSHTML aka Triden...
Microsoft MSHTML Remote Code Execution Vulnerability
MSHTML also known as Trident is Microsoft's Internet Explorer browser engine, and while MHTML is primarily used in the deprecated Internet Explorer browser, the component is also used in Office applications to render Word, Excel, or PowerPoint documents in A remote code execution vulnerability...
Vulnerability found in Microsoft Windows
A vulnerability has been found in Microsoft Windows' MSHTML component. A malicious party could potentially exploit it to execute arbitrary code under the privileges of a user. To do this, the malicious party needs to get the victim to to open a rogue Office document. Microsoft indicates that ther...
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious Active...
PT-2021-3925
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Remote code execution is possible in MSHTML, the browser rendering engine used by Microsoft Internet Explorer and hosted within Microsoft Office documents. The issue stems from...
The vulnerability of the MSHTML platform on Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...
CVE-2021-34534
Windows MSHTML Platform Remote Code Execution Vulnerability...
Remote code execution
Windows MSHTML Platform Remote Code Execution Vulnerability...
CVE-2021-34534 Windows MSHTML Platform Remote Code Execution Vulnerability
...
CVE-2021-34534
CVE-2021-34534 is a Windows MSHTML Platform Remote Code Execution vulnerability. Affects the Windows MSHTML Platform component; CVSSv3.1 base score 7.5 (HIGH) with network access required and user interaction required. Exploitation vectors, root cause, and exact affected versions are not detailed...
CVE-2021-34534 Windows MSHTML Platform Remote Code Execution Vulnerability
...
Microsoft Windows Multiple Vulnerabilities (KB5005040)
This host is missing a critical security update according to Microsoft KB5005040 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows MSHTML Platform Remote Code Execution Vulnerability
...
Microsoft Windows MSHTML Platform 代码注入漏洞
Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...
