CVE-2024-43573: medium-severity vulnerability in Microsoft Windows 10 Version 1507
Windows MSHTML Platform Spoofing Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in Windows MSHTML allows attackers to spoof web content or mislead users about the origin of web pages, potentially tricking them into trusting malicious sites.
CWE-79 vulnerability in MSHTML enables DOM-based spoofing attacks where an attacker can manipulate the rendering of web content to misrepresent its source or authenticity. Exploitation requires user interaction with a crafted webpage and affects the integrity of security indicators.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.