CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-09-10
Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461) Security Advisory
[Affected Scope] All supported versions of Microsoft Windows client and server operating systems utilizing the MSHTML platform
[Impact] Attackers can spoof file extensions to trick users into executing malicious payloads, leading to potential Remote Code Execution (RCE)
[Mitigation] Apply the Microsoft September 2024 cumulative security updates immediately and restrict execution of untrusted files