A vulnerability was found in Microsoft Windows (Operating System) and classified as critical. Affected by this issue is an unknown part of the component MSHTML Platform. Applying a patch is able to eliminate this problem. A possible mitigation has been published immediately after the disclosure of the vulnerability.
Description ( CVE-2021-33742)
Windows MSHTML Platform Remote Code Execution Vulnerability
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Severity: 7.5 (Critical)
Exploitation vector: Network
CIA Impact: High
Public exploit: This vulnerability is being exploited in the wild.
Vulnerable software
- Operating systems & Components / Operating system
- Windows Server
- Microsoft Internet Explorer
- Microsoft Edge
Mitigation
Patch is available