New 0-Day Attack Targeting Windows Users With Microsoft Office Documents

Microsoft on Tuesday warned of an actively exploited zero-day flaw impacting Internet Explorer that's being used to hijack vulnerable Windows systems by leveraging weaponized Office documents. Tracked as CVE-2021-40444 CVSS score: 8.8, the remote code execution flaw is rooted in MSHTML aka Triden...

Microsoft MSHTML Remote Code Execution Vulnerability

MSHTML also known as Trident is Microsoft's Internet Explorer browser engine, and while MHTML is primarily used in the deprecated Internet Explorer browser, the component is also used in Office applications to render Word, Excel, or PowerPoint documents in A remote code execution vulnerability...

Vulnerability found in Microsoft Windows

A vulnerability has been found in Microsoft Windows' MSHTML component. A malicious party could potentially exploit it to execute arbitrary code under the privileges of a user. To do this, the malicious party needs to get the victim to to open a rogue Office document. Microsoft indicates that ther...

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious Active...

PT-2021-3925

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Remote code execution is possible in MSHTML, the browser rendering engine used by Microsoft Internet Explorer and hosted within Microsoft Office documents. The issue stems from...

The vulnerability of the MSHTML platform on Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

CVE-2021-34534

Windows MSHTML Platform Remote Code Execution Vulnerability...

Remote code execution

Windows MSHTML Platform Remote Code Execution Vulnerability...

CVE-2021-34534 Windows MSHTML Platform Remote Code Execution Vulnerability

...

CVE-2021-34534

CVE-2021-34534 is a Windows MSHTML Platform Remote Code Execution vulnerability. Affects the Windows MSHTML Platform component; CVSSv3.1 base score 7.5 (HIGH) with network access required and user interaction required. Exploitation vectors, root cause, and exact affected versions are not detailed...

CVE-2021-34534 Windows MSHTML Platform Remote Code Execution Vulnerability

...

CVE-2021-34534: Undefined Security Weakness

Windows MSHTML Platform Remote Code Execution Vulnerability...

Microsoft Windows Multiple Vulnerabilities (KB5005040)

This host is missing a critical security update according to Microsoft KB5005040 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows MSHTML Platform Remote Code Execution Vulnerability

...

Microsoft Windows MSHTML Platform 代码注入漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

CVE-2021-34447

Windows MSHTML Platform Remote Code Execution Vulnerability...

CVE-2021-34447

Windows MSHTML Platform Remote Code Execution Vulnerability...

Remote code execution

Windows MSHTML Platform Remote Code Execution Vulnerability...

CVE-2021-34447 Windows MSHTML Platform Remote Code Execution Vulnerability

...

CVE-2021-34447

CVE-2021-34447 is tied to Windows MSHTML/Internet Explorer, with public details indicating an IE11 remote-code-execution vulnerability. Connected KB entry KB5005563 describes a cumulative security update for Internet Explorer (Sept 14, 2021) that resolves IE/MSHTML vulnerabilities and lists affec...