Lucene search
K

52 matches found

RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.3 views

CVE-2026-21513

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.5AI score0.2798EPSS
Exploits0References1
OSV
OSV
added 2026/02/10 6:16 p.m.2 views

CVE-2026-21513

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.8AI score0.2798EPSS
Exploits0References2
CVE
CVE
added 2026/02/10 5:51 p.m.40 views

CVE-2026-21513

CVE-2026-21513 is a security feature bypass vulnerability in the MSHTML Framework. Affected component: MSHTML/MSHTML Framework used by Windows’ browsing/rendering stack. Root cause details are described in vendor advisories and security blogs as a protection mechanism bypass that can be triggered...

8.8CVSS5.5AI score0.2798EPSS
In wildExploits0References4Affected Software13
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.3 views

KB5075941: Windows 11 version 23H2 Security Update (February 2026)

The remote Windows host is missing security update 5075941. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Access of resource using incompatible...

8.8CVSS7.1AI score0.2798EPSS
Exploits9References27
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.5 views

PT-2026-7399

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 1607 versions prior to 10.0.14393.8868 Microsoft Windows 10 1809 versions prior to 10.0.17763.8389 Microsoft Windows 10 21H2 versions prior to 10.0.19044.6937 Microsoft Windows 10 22H2 versions prior to 10.0.19045.6937...

10CVSS7.6AI score0.2798EPSS
Exploits0References177
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.1 views

KB5077179: Windows 11 Version 26H1 Security Update (February 2026)

The remote Windows host is missing security update 5077179. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Access of resource using incompatible...

8.8CVSS7.1AI score0.2798EPSS
Exploits12References26
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-21102

Malware in sbrugna...

8.8CVSS7.1AI score0.05707EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-1999-0997

Malware in sbrugna...

5CVSS6.4AI score0.07663EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2004-1309

Malware in sbrugna...

10CVSS6.4AI score0.00992EPSS
Exploits0References5
OSV
OSV
added 2024/10/08 6:15 p.m.2 views

CVE-2024-43573

Windows MSHTML Platform Spoofing Vulnerability...

8.1CVSS5.8AI score0.17703EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.1 views

PT-2024-6672 · Microsoft · Mshtml +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows MSHTML Platform affected versions not specified Description: The issue is related to a spoofing vulnerability in the MSHTML platform of Microsoft Windows, which can be exploited by a remote attacker to conduct spoofing...

8.1CVSS7.8AI score0.17703EPSS
Exploits0References72
OSV
OSV
added 2024/09/10 5:15 p.m.0 views

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability...

8.8CVSS5.8AI score0.09898EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/07/11 6:15 p.m.1 views

CVE-2023-35308

Windows MSHTML Platform Security Feature Bypass Vulnerability...

6.5CVSS5.7AI score0.01044EPSS
Exploits0References2Affected Software14
VulnCheck KEV
VulnCheck KEV
added 2023/07/11 12:0 a.m.0 views

VulnCheck KEV: CVE-2023-32046

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.3AI score0.42658EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2022/09/20 12:0 a.m.4 views

September 20, 2022—KB5017379 (OS Build 17763.3469) Preview

September 20, 2022—KB5017379 OS Build 17763.3469 Preview REMINDER 9/20/22 After today, September 20, 2022, there will no longer be optional, non-security releases known as "C" or preview releases for the 2019 LTSC editions and Windows Server 2019. Only cumulative monthly security updates known as...

6.9AI score
Exploits0
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:0 a.m.0 views

VulnCheck KEV: CVE-2019-0541

Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability...

9.3CVSS7.7AI score0.87167EPSS
Exploits4References1
VulnCheck KEV
VulnCheck KEV
added 2021/09/07 12:0 a.m.0 views

VulnCheck KEV: CVE-2021-40444

Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution...

8.8CVSS7.2AI score0.94332EPSS
Exploits38References1
CNNVD
CNNVD
added 2021/09/07 12:0 a.m.2 views

Microsoft MSHTML.DLL 路径遍历漏洞

MSHTML also known as Trident is Microsoft's Internet Explorer browser engine, and while MHTML is primarily used in the deprecated Internet Explorer browser, the component is also used in Office applications to render Word, Excel, or PowerPoint documents in A remote code execution vulnerability...

8.8CVSS8.5AI score0.94332EPSS
Exploits38References10
OSV
OSV
added 2020/05/21 11:15 p.m.1 views

CVE-2020-1064

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'...

7.5CVSS7.9AI score0.09339EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/10 12:0 a.m.3 views

Microsoft MSHTML Engine Input Validation Vulnerability

Microsoft Internet Explorer and others are products of Microsoft Corporation.Microsoft Internet Explorer IE is a web browser.Office 2010 SP2 is an office suite.Microsoft MSHTML engine Office 2010 SP2 is an office suite. Microsoft MSHTML engine is one of the engines used to parse the HTML language...

9.3CVSS7.8AI score0.87167EPSS
Exploits4References1
Rows per page
Query Builder