CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461) Security Advisory
[Affected Scope] All supported versions of Microsoft Windows client and server operating systems utilizing the MSHTML platform
[Impact] Attackers can spoof file extensions to trick users into executing malicious payloads, leading to potential Remote Code Execution (RCE)
[Mitigation] Apply the Microsoft September 2024 cumulative security updates immediately and restrict execution of untrusted files
Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-38112) Technical Analysis and Mitigation Guide
[Affected Scope] MSHTML (Internet Explorer) engine embedded in all supported versions of Windows 10, 11, and Windows Server
[Impact] Attackers can bypass security warnings via specially crafted Internet Shortcut (.url) files, leading to arbitrary code execution and complete system compromise
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict the execution of untrusted .url and .lnk files