CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-05-14
Windows MSHTML Platform Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2024-30040) Analysis & Mitigation Guide
[Affected Scope] Windows client and server operating systems utilizing the Windows MSHTML platform
[Impact] Attackers can bypass security warnings and protection mechanisms to execute remote code via malicious files loading OLE objects with user interaction
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict execution of untrusted files and email attachments