Service Advisory - Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444)
Posted on
September 8, 2021
Service Advisory
Please share the following information with your teams.
Information Security has notified a zero-day Microsoft vulnerability (CVE-2021-40444). Exploitation of this vulnerability may allow a remote attacker to take control of an affected system.
Severity level
CVSS Score: (High) 8.8
Description
MSHTML is a browser rendering engine that is also used by Microsoft Office documents, and the attacks are said to utilize specially-crafted documents that targeted users would have to click.
Affected Versions: Windows OS
Impact
A remote attacker could exploit this vulnerability to take control of an affected system.
Resolution
Microsoft released the Mitigations and workarounds to address this vulnerability.
