Windows MSHTML Platform Spoofing Vulnerability

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker would have to send the victim a malicious file that the victim would have to execute.

Security updates
10.0.19045.4651 — https://support.microsoft.com/help/5040427
10.0.22631.3880 — https://support.microsoft.com/help/5040442
10.0.10240.20710 — https://support.microsoft.com/help/5040448
10.0.14393.7159 — https://support.microsoft.com/help/5040434
6.0.6003.22769 — https://support.microsoft.com/help/5040499
6.0.6003.22769 — https://support.microsoft.com/help/5040490
1.001 — https://support.microsoft.com/help/5040426
10.0.17763.6054 — https://support.microsoft.com/help/5040430
6.3.9600.22074 — https://support.microsoft.com/help/5040456
10.0.20348.2582 — https://support.microsoft.com/help/5040437
10.0.25398.1009 — https://support.microsoft.com/help/5040438
10.0.22000.3079 — https://support.microsoft.com/help/5040431