Lucene search
+L

33 matches found

Information Security Automation
Information Security Automation
•added 2024/10/30 10:51 a.m.•111 views

What is known about the Spoofing – Windows MSHTML Platform (CVE-2024-43573) vulnerability from the October Microsoft Patch Tuesday?

What is known about the Spoofing - Windows MSHTML Platform CVE-2024-43573 vulnerability from the October Microsoft Patch Tuesday? In fact, just that it is being exploited in the wild. There are no write-ups or public exploits yet. The Acknowledgements section in the Microsoft bulletin is empty. I...

8.1CVSS7AI score0.84225EPSS
SaveExploits0
VulnCheck KEV
VulnCheck KEV
•added 2024/10/08 12:00 a.m.•7 views

VulnCheck KEV: CVE-2024-43573

Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality...

8.1CVSS5.8AI score0.46109EPSS
SaveIn wildExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/08 12:00 a.m.•1 views

CVE-2024-43573: Improper Neutralization of Input During Web Page Generation

Windows MSHTML Platform Spoofing Vulnerability...

8.1CVSS7.3AI score0.46109EPSS
SaveExploits0References2
Qualys Blog
Qualys Blog
•added 2024/07/09 7:09 p.m.•155 views

Microsoft and Adobe Patch Tuesday, July 2024 Security Update Review

Julys Patch Tuesday brings a midsummer wave of updates, addressing critical vulnerabilities and enhancing security across the Microsoft ecosystem. Lets discover the highlights from Microsofts Patch Tuesday updates for July 2024. Microsoft Patch Tuesday for July 2024 Microsoft Patch Tuesdays July...

9.8CVSS8AI score0.84232EPSS
SaveExploits7
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•32 views

Microsoft Windows MSHTML Platform Security Vulnerability

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected:Windows Server 2012...

7.5CVSS6.6AI score0.84225EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2024/05/14 12:00 a.m.•153 views

KLA67433 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

8.8CVSS10AI score0.11471EPSS
SaveExploits4References64
VulnCheck KEV
VulnCheck KEV
•added 2024/01/30 12:00 a.m.•7 views

VulnCheck KEV: CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability...

6.5CVSS7.1AI score0.02866EPSS
SaveIn wildExploits0References5
CNNVD
CNNVD
•added 2023/12/12 12:00 a.m.•14 views

Microsoft Windows MSHTML Platform Security Vulnerability

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are affected: Windows 11 Version 23H...

8.1CVSS9.2AI score0.92817EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•3 views

CVE-2023-35628: Use After Free

Windows MSHTML Platform Remote Code Execution Vulnerability...

8.1CVSS7.9AI score0.92817EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/10/11 12:00 a.m.•176 views

Microsoft Windows Multiple Vulnerabilities (KB5031362)

This host is missing an important security update according to Microsoft KB5031362 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.9AI score0.99999EPSS
SaveExploits21References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•0 views

CVE-2023-36436: Undefined Security Weakness

Windows MSHTML Platform Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.01018EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/12 5:15 p.m.•33 views

Security feature bypass

Windows MSHTML Platform Security Feature Bypass Vulnerability...

3.7CVSS6.7AI score0.01762EPSS
SaveExploits0References1Affected Software8
OSV
OSV
•added 2023/07/11 6:15 p.m.•6 views

CVE-2023-35336

Windows MSHTML Platform Security Feature Bypass Vulnerability...

5.4CVSS7.3AI score0.00917EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/11 6:15 p.m.•45 views

Security feature bypass

Windows MSHTML Platform Security Feature Bypass Vulnerability...

6.4CVSS6.5AI score0.01114EPSS
SaveExploits0References1Affected Software8
Positive Technologies
Positive Technologies
•added 2023/07/11 12:00 a.m.•8 views

PT-2023-3828 · Microsoft · Windows Mshtml Platform +2

Name of the Vulnerable Software and Affected Versions: Windows MSHTML Platform affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass security restrictions. This can affect the system. Recommendations: At the moment,...

6.5CVSS9.3AI score0.01114EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/07/11 12:00 a.m.•11 views

PT-2023-3685 · Microsoft · Windows Mshtml Platform +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows MSHTML Platform affected versions not specified Description: The issue is related to a privilege escalation vulnerability in the Microsoft Windows MSHTML Platform. It is caused by a buffer overflow in memory, which can allow...

7.8CVSS9.2AI score0.10049EPSS
SaveExploits0References25
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•14 views

Microsoft Windows MSHTML Platform 安全漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. An attacker could exploit this vulnerability to bypass certain functionality. The following products and editions are affected:Windows 10 Versi...

6.5CVSS6.8AI score0.00917EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•0 views

CVE-2023-35336: Improper Input Validation

Windows MSHTML Platform Security Feature Bypass Vulnerability...

6.5CVSS6.3AI score0.00917EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2023/05/10 2:23 p.m.•13 views

Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft

Cybersecurity researchers have shared details about a now-patched security flaw in Windows MSHTML platform that could be abused to bypass integrity protections on targeted machines. The vulnerability, tracked as CVE-2023-29324 CVSS score: 6.5, has been described as a security feature bypass. It w...

9.8CVSS7AI score0.97159EPSS
SaveExploits19
OSV
OSV
•added 2023/05/09 6:15 p.m.•9 views

CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability...

6.5CVSS7.2AI score0.02866EPSS
SaveExploits0References1
Rows per page
Query Builder