HIGH

CVE-2024-43461

Microsoft Windows 10 1507 2024-09-10 CVSS v3.1

CVSS

8.8

KEV

Description

Windows MSHTML Platform Spoofing Vulnerability

Summary dbcve.org

A spoofing vulnerability in the Windows MSHTML platform allows attackers to misrepresent content, likely through manipulation of HTML rendering or security UI indicators, potentially tricking users into trusting malicious content.

Mitigation

Apply the Microsoft security update for CVE-2024-43461 through Windows Update or enterprise patch management systems.

Patch Commit

Weakness (CWE)

CWE-451

EPSS Score

54.49%

Probability of exploitation in next 30 days

99th percentile

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461 Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43461 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE