Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft — Windows
- Added to KEV catalog
- 8 October 2024
- Federal remediation due date
- 29 October 2024
- Weakness classification (CWE)
- CWE-79
CISA Description
Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43573
More Microsoft Vulnerabilities
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft Windows Buffer Overflow Vulnerability
Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer Use-After-Free Vulnerability
Is this vulnerability present in your environment?
CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.
Explore VAPT Services