CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-15
Microsoft Windows MSHTML Remote Code Execution Vulnerability (CVE-2021-40444) Security Advisory
[Affected Scope] Systems running Microsoft Windows OS utilizing the MSHTML (Internet Explorer) rendering engine and Microsoft Office suites
[Impact] Successful exploitation allows remote attackers to execute arbitrary code (RCE) with the privileges of the active user by tricking them into opening a specially crafted Office document
[Mitigation] Apply the official Microsoft security updates immediately, or implement registry workarounds to disable ActiveX controls as a temporary mitigation