Skip to content
OpenAdvisories
High MSRC-CVE-2021-34447 1 CVE

Windows MSHTML Platform Remote Code Execution Vulnerability

Published Jul 13, 2021 · Updated Jul 13, 2021

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.

Security updates
10.0.17763.2061 — https://support.microsoft.com/help/5004244
10.0.18363.1679 — https://support.microsoft.com/help/5004245
10.0.19043.1110 — https://support.microsoft.com/help/5004237
10.0.10240.19003 — https://support.microsoft.com/help/5004249
10.0.14393.4530 — https://support.microsoft.com/help/5004238
6.1.7601.25661 — https://support.microsoft.com/help/5004289
1.001 — https://support.microsoft.com/help/5005563
6.3.9600.20069 — https://support.microsoft.com/help/5004298
6.0.6003.21167 — https://support.microsoft.com/help/5004305
6.2.9200.23409 — https://support.microsoft.com/help/5004294

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References