CVE Catalog

CVE-2021-34447

MediumCVSS 6.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
1.76%

76th percentile - higher than 76% of all known CVEs

Summary

A remote code execution vulnerability in the Windows MSHTML platform allows an attacker to execute arbitrary code in the context of the logged-on user. The attack can be carried out via a specially crafted web page or document.

Risk Assessment

The risk includes full compromise of the user's system, potentially leading to data theft, malware installation, and privilege escalation.

Recommendation

It is recommended to urgently install Windows updates and limit the use of browsers and applications that rely on MSHTML.

Original NVD description (English source)

Windows MSHTML Platform Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS