Lucene search
K

24 matches found

Information Security Automation
Information Security Automation
added 2024/10/30 10:51 a.m.27 views

What is known about the Spoofing – Windows MSHTML Platform (CVE-2024-43573) vulnerability from the October Microsoft Patch Tuesday?

What is known about the Spoofing - Windows MSHTML Platform CVE-2024-43573 vulnerability from the October Microsoft Patch Tuesday? In fact, just that it is being exploited in the wild. There are no write-ups or public exploits yet. The Acknowledgements section in the Microsoft bulletin is empty. I...

8.1CVSS7AI score0.92959EPSS
Exploits0
VulnCheck KEV
VulnCheck KEV
added 2024/10/08 12:0 a.m.1 views

VulnCheck KEV: CVE-2024-43573

Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality...

8.1CVSS5.8AI score0.17703EPSS
Exploits0References1
Qualys Blog
Qualys Blog
added 2024/07/09 7:9 p.m.142 views

Microsoft and Adobe Patch Tuesday, July 2024 Security Update Review

Julys Patch Tuesday brings a midsummer wave of updates, addressing critical vulnerabilities and enhancing security across the Microsoft ecosystem. Lets discover the highlights from Microsofts Patch Tuesday updates for July 2024. Microsoft Patch Tuesday for July 2024 Microsoft Patch Tuesdays July...

9.8CVSS9.8AI score0.92959EPSS
Exploits6
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.4 views

Microsoft Windows MSHTML Platform Security Vulnerability

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected:Windows Server 2012...

7.5CVSS6.6AI score0.92959EPSS
Exploits0References2
Kaspersky
Kaspersky
added 2024/05/14 12:0 a.m.67 views

KLA67433 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

8.8CVSS10AI score0.48113EPSS
Exploits4References64
VulnCheck KEV
VulnCheck KEV
added 2024/01/30 12:0 a.m.0 views

VulnCheck KEV: CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability...

6.5CVSS7.1AI score0.01873EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/12/12 12:0 a.m.3 views

Microsoft Windows MSHTML Platform Security Vulnerability

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are affected: Windows 11 Version 23H...

8.1CVSS9.2AI score0.15543EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/10/11 12:0 a.m.152 views

Microsoft Windows Multiple Vulnerabilities (KB5031362)

This host is missing an important security update according to Microsoft KB5031362 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.9AI score0.9439EPSS
Exploits19References8
Prion
Prion
added 2023/09/12 5:15 p.m.25 views

Security feature bypass

Windows MSHTML Platform Security Feature Bypass Vulnerability...

3.7CVSS6.7AI score0.00232EPSS
Exploits0References1Affected Software8
OSV
OSV
added 2023/07/11 6:15 p.m.0 views

CVE-2023-35336

Windows MSHTML Platform Security Feature Bypass Vulnerability...

5.4CVSS7.3AI score0.00593EPSS
Exploits0References1
Prion
Prion
added 2023/07/11 6:15 p.m.31 views

Security feature bypass

Windows MSHTML Platform Security Feature Bypass Vulnerability...

6.4CVSS6.5AI score0.01044EPSS
Exploits0References1Affected Software8
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.4 views

Microsoft Windows MSHTML Platform 安全漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. An attacker could exploit this vulnerability to bypass certain functionality. The following products and editions are affected:Windows 10 Versi...

6.5CVSS6.8AI score0.00593EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.3 views

PT-2023-3828 · Microsoft · Windows Mshtml Platform +2

Name of the Vulnerable Software and Affected Versions: Windows MSHTML Platform affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass security restrictions. This can affect the system. Recommendations: At the moment,...

6.5CVSS9.3AI score0.01044EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.3 views

PT-2023-3685 · Microsoft · Windows Mshtml Platform +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows MSHTML Platform affected versions not specified Description: The issue is related to a privilege escalation vulnerability in the Microsoft Windows MSHTML Platform. It is caused by a buffer overflow in memory, which can allow...

7.8CVSS9.2AI score0.42658EPSS
Exploits0References25
The Hacker News
The Hacker News
added 2023/05/10 2:23 p.m.5 views

Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft

Cybersecurity researchers have shared details about a now-patched security flaw in Windows MSHTML platform that could be abused to bypass integrity protections on targeted machines. The vulnerability, tracked as CVE-2023-29324 CVSS score: 6.5, has been described as a security feature bypass. It w...

9.8CVSS7AI score0.93399EPSS
Exploits18
OSV
OSV
added 2023/05/09 6:15 p.m.1 views

CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability...

6.5CVSS7.2AI score0.01873EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/05/09 12:0 a.m.8 views

Microsoft Windows MSHTML Platform 安全漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windo...

6.5CVSS8AI score0.01873EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.3 views

PT-2023-2710 · Microsoft · Windows Mshtml Platform +2

Name of the Vulnerable Software and Affected Versions: Windows MSHTML Platform affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass security restrictions. This security-feature bypass vulnerability enables attackers...

6.5CVSS9.4AI score0.01873EPSS
Exploits0References11
NCSC
NCSC
added 2021/09/08 12:0 a.m.3 views

Vulnerability found in Microsoft Windows

A vulnerability has been found in Microsoft Windows' MSHTML component. A malicious party could potentially exploit it to execute arbitrary code under the privileges of a user. To do this, the malicious party needs to get the victim to to open a rogue Office document. Microsoft indicates that ther...

8.8CVSS7.4AI score0.94332EPSS
Exploits38
OSV
OSV
added 2021/07/16 9:15 p.m.0 views

CVE-2021-34447

Windows MSHTML Platform Remote Code Execution Vulnerability...

6.8CVSS7.4AI score0.07553EPSS
Exploits0References1
Rows per page
Query Builder