Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43573 is a spoofing vulnerability in Windows MSHTML Platform (rated Moderate, CVSS 6.5). Microsoft reports that it is being exploited.
Exploited1 version
Facts
- Microsoft id
CVE-2024-43573- Status
- Exploited
- Products
- Windows MSHTML Platform
- Severity
- Moderate
- Impact
- Spoofing
- CVSS
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
- Exploited
- Yes
- Publicly disclosed
- Yes
- Exploitability
- Exploitation Detected
- Customer action required
- Yes
- Release
- 2024-Oct
- Assigned by
- Microsoft
- Weakness
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- MSRC revision
- 1.0
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2024-10-08:
Information published.
Microsoft says
The Security Updates table indicates that this vulnerability affects all supported versions of Microsoft Windows except Windows Server 2008, Windows Server 2008 R2, and Windows…
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
As first seen: Exploited
- Status
- Exploited
Seen by us · Microsoft's timestamp · Microsoft's page