CVE-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability

Windows 10 1507

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users…

15. Sep 2021

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444
• Microsoft
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40444
• Hinweis
  http://packetstormsecurity.com/files/164210/Microsoft-Windows-MSHTML-Overview.html
• Hinweis
  http://packetstormsecurity.com/files/165214/Microsoft-Office-Word-MSHTML-Remote-Code-Execution.html
• Hinweis
  http://packetstormsecurity.com/files/167317/Microsoft-Office-MSDT-Follina-Proof-Of-Concept.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40444
• CISA
  Microsoft MSHTML Remote Code Execution Vulnerability
• NVD
  CVE-2021-40444