CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft MSHTML Framework Security Feature Bypass Vulnerability (CVE-2026-21513) Analysis and Mitigation Guide
[Affected Scope] Applications and system components utilizing the MSHTML (Trident) engine within Microsoft Windows environments
[Impact] Unauthorized network attackers can bypass critical security boundaries and sandbox protections, potentially leading to remote code execution
[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or implement registry-based workarounds to restrict MSHTML rendering
Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43573) Security Advisory & Mitigation Guide
[Affected Scope] All supported versions of Windows client and server operating systems utilizing the MSHTML (Internet Explorer) engine.
[Impact] Attackers can bypass security warnings and spoof trusted domains to steal sensitive credentials or execute malicious payloads by tricking users into visiting crafted web content.
[Mitigation] Immediately apply the October 2024 Microsoft cumulative security updates and restrict MSHTML execution via registry hardening.
Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461) Security Advisory
[Affected Scope] All supported versions of Microsoft Windows client and server operating systems utilizing the MSHTML platform
[Impact] Attackers can spoof file extensions to trick users into executing malicious payloads, leading to potential Remote Code Execution (RCE)
[Mitigation] Apply the Microsoft September 2024 cumulative security updates immediately and restrict execution of untrusted files
Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-38112) Technical Analysis and Mitigation Guide
[Affected Scope] MSHTML (Internet Explorer) engine embedded in all supported versions of Windows 10, 11, and Windows Server
[Impact] Attackers can bypass security warnings via specially crafted Internet Shortcut (.url) files, leading to arbitrary code execution and complete system compromise
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict the execution of untrusted .url and .lnk files
Windows MSHTML Platform Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2024-30040) Analysis & Mitigation Guide
[Affected Scope] Windows client and server operating systems utilizing the Windows MSHTML platform
[Impact] Attackers can bypass security warnings and protection mechanisms to execute remote code via malicious files loading OLE objects with user interaction
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict execution of untrusted files and email attachments
Windows MSHTML Platform Elevation of Privilege Vulnerability (CVE-2023-32046) Analysis and Mitigation Guide
[Affected Scope] Windows client and server operating systems utilizing the MSHTML platform
[Impact] Attackers can bypass security boundaries (including AppContainer restrictions) and execute arbitrary code with the privileges of the logged-in user by tricking them into opening crafted files
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict opening untrusted email attachments or web links
Microsoft Internet Explorer SetMouseCapture Use-After-Free Remote Code Execution Vulnerability (CVE-2013-3893)
[Affected Scope] Microsoft Internet Explorer versions 6 through 11
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user via crafted JavaScript and ms-help: protocol handlers
[Mitigation] Apply the MS13-080 cumulative security update, or implement workarounds such as disabling hxds.dll loading
Microsoft Internet Explorer mshtml.dll Use-After-Free Remote Code Execution Vulnerability (CVE-2012-4969)
[Affected Scope] Microsoft Internet Explorer versions 6, 7, 8, and 9
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user by enticing a user to visit a specially crafted website
[Mitigation] Apply the official cumulative security update (MS12-063), transition to a modern supported browser, or apply the official Fix it solution