CVE-2024-43461CISA KEVEPSS p99.0%

CVE-2024-43461Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft / Windows

Description

Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS54.49% probability of exploitation · percentile 99.0% · 2026-10-03T12:00:21Z
Last modified2026-08-10

CISA KEV entry

Added to KEV: 2024-09-16

(incoming)1

TypeTargetConfidenceTier
KEVEntryMicrosoft Windows MSHTML Platform Spoofing Vulnerabilitykev-cve-2024-434610%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
CVE
Microsoft MSHTML Remote Code Execution Vulnerability
CVE
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
CVE
CVE-2026-45468
CVE
CVE-2026-45481
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.