Lucene search
+L

469 matches found

Information Security Automation
Information Security Automation
•added 2024/10/30 10:51 a.m.•113 views

What is known about the Spoofing – Windows MSHTML Platform (CVE-2024-43573) vulnerability from the October Microsoft Patch Tuesday?

What is known about the Spoofing - Windows MSHTML Platform CVE-2024-43573 vulnerability from the October Microsoft Patch Tuesday? In fact, just that it is being exploited in the wild. There are no write-ups or public exploits yet. The Acknowledgements section in the Microsoft bulletin is empty. I...

8.1CVSS7AI score0.84225EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2024/10/09 6:53 a.m.•67 views

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...

9.8CVSS8.6AI score0.84225EPSS
SaveExploits5
Krebs on Security
Krebs on Security
•added 2024/10/08 10:21 p.m.•55 views

Patch Tuesday, October 2024 Edition

Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple has addressed a bug in its new...

8.8CVSS6.6AI score0.66695EPSS
SaveExploits0
NVD
NVD
•added 2024/10/08 6:15 p.m.•36 views

CVE-2024-43573

Windows MSHTML Platform Spoofing Vulnerability...

8.1CVSS0.46109EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/08 5:35 p.m.•30 views

CVE-2024-43573 Windows MSHTML Platform Spoofing Vulnerability

...

6.5CVSS7.2AI score0.46109EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/08 5:35 p.m.•110 views

CVE-2024-43573 Windows MSHTML Platform Spoofing Vulnerability

...

6.5CVSS0.46109EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/08 5:35 p.m.•559 views

CVE-2024-43573

CVE-2024-43573 is a Windows MSHTML Platform Spoofing vulnerability. Public sources confirm it affects MSHTML in Windows and that patches were released (Microsoft Update Guide). There is evidence of exploitation in the wild for MSHTML-related spoofing vulnerabilities, including references noting a...

8.1CVSS7.4AI score0.46109EPSS
SaveIn wildExploits0References2Affected Software14
Microsoft CVE
Microsoft CVE
•added 2024/10/08 7:00 a.m.•33 views

Windows MSHTML Platform Spoofing Vulnerability

...

8.1CVSS7.1AI score0.46109EPSS
SaveExploits0
VulnCheck KEV
VulnCheck KEV
•added 2024/10/08 12:00 a.m.•8 views

VulnCheck KEV: CVE-2024-43573

Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality...

8.1CVSS5.8AI score0.46109EPSS
SaveIn wildExploits0References5
CNNVD
CNNVD
•added 2024/10/08 12:00 a.m.•17 views

Microsoft Windows MSHTML Platform 跨站脚本漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A cross-site scripting vulnerability exists in Microsoft Windows MSHTML Platform. An attacker could exploit this vulnerability to perform spoofing attacks. The following products and versions are affected:Windows ...

8.1CVSS8.1AI score0.46109EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/08 12:00 a.m.•1 views

CVE-2024-43573: Improper Neutralization of Input During Web Page Generation

Windows MSHTML Platform Spoofing Vulnerability...

8.1CVSS7.3AI score0.46109EPSS
SaveExploits0References2
CISA KEV Catalog
CISA KEV Catalog
•added 2024/10/08 12:00 a.m.•120 views

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality...

8.1CVSS6.8AI score0.46109EPSS
SaveIn wildExploits0
attackerkb
attackerkb
•added 2024/10/08 12:00 a.m.•84 views

CVE-2024-43573

Windows MSHTML Platform Spoofing Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

8.1CVSS6.9AI score0.46109EPSS
SaveIn wildExploits0References2
CISA KEV Catalog
CISA KEV Catalog
•added 2024/09/16 12:00 a.m.•128 views

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft Windows MSHTML Platform contains a user interface UI misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112...

8.8CVSS6.7AI score0.84225EPSS
SaveIn wildExploits0
NVD
NVD
•added 2024/09/10 5:15 p.m.•60 views

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability...

8.8CVSS0.54486EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/09/10 4:54 p.m.•186 views

CVE-2024-43461 Windows MSHTML Platform Spoofing Vulnerability

...

8.8CVSS0.54486EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/10 4:54 p.m.•449 views

CVE-2024-43461

CVE-2024-43461 — Windows MSHTML Platform Spoofing Vulnerability : A UI misrepresentation in MSHTML that can be used to spoof a web page. Affected component: Windows MSHTML Platform. Underlying issue is a UI spoofing flaw; CVSSv3.1 score 8.8 ( NETWORK, LOW, NONE, UI: REQUIRED; Confidentiality/Inte...

8.8CVSS9.3AI score0.54486EPSS
SaveIn wildExploits0References2Affected Software15
Vulnrichment
Vulnrichment
•added 2024/09/10 4:54 p.m.•86 views

CVE-2024-43461 Windows MSHTML Platform Spoofing Vulnerability

...

8.8CVSS8.8AI score0.54486EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2024/09/10 7:00 a.m.•39 views

Windows MSHTML Platform Spoofing Vulnerability

...

8.8CVSS7.1AI score0.84225EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/09/10 12:00 a.m.•12 views

PT-2024-6158

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to a Windows MSHTML platform spoofing vulnerability, which allows attackers to execute arbitrary code remotely. This vulnerability has been exploited by the...

10CVSS7.5AI score0.54486EPSS
SaveExploits0References152
Rows per page
Query Builder