CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-07-11
Windows MSHTML Platform Elevation of Privilege Vulnerability (CVE-2023-32046) Analysis and Mitigation Guide
[Affected Scope] Windows client and server operating systems utilizing the MSHTML platform
[Impact] Attackers can bypass security boundaries (including AppContainer restrictions) and execute arbitrary code with the privileges of the logged-in user by tricking them into opening crafted files
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict opening untrusted email attachments or web links