KB5075971: Windows Server 2012 Security Update (February 2026)

The remote Windows host is missing security update 5075971. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Heap-based buffer overflow in Microso...

KB5075899: Windows Server 2025 Security Update (February 2026)

The remote Windows host is missing security update 5075899. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Access of resource using incompatible...

CVE-2026-21513: Protection Mechanism Failure

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

KB5075970: Windows Server 2012 R2 Security Update (February 2026)

The remote Windows host is missing security update 5075970. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Heap-based buffer overflow in Microso...

CVE-1999-0489

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013...

EUVD-2021-21187

Malware in sbrugna...

EUVD-2021-21151

Malware in sbrugna...

EUVD-2020-11956

Malware in sbrugna...

EUVD-2020-12441

Malware in sbrugna...

EUVD-2023-25972

Malicious code in bioql PyPI...

EUVD-2023-40400

Malicious code in bioql PyPI...

EUVD-2024-40730

Malicious code in bioql PyPI...

EUVD-2023-40743

Malicious code in bioql PyPI...

EUVD-2023-39311

Malicious code in bioql PyPI...

EUVD-2021-28371

Malicious code in bioql PyPI...

EUVD-2023-39339

Malicious code in bioql PyPI...

EUVD-2023-32899

Malicious code in bioql PyPI...

CVE-2020-1064

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'...

The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper handling of path equivalence. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

Patch Tuesday - November 2024

Microsoft is addressing 90 vulnerabilities this November 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today, although as with last month’s batch, it does not evaluate any of these zero-day vulnerabilities...