About CVE-2021-40444

Vulnerability Name Microsoft MSHTML Remote Code Execution Vulnerability(CVE-2021-40444)
Attack Type Code Injection
Time Discovered 2021-09-07
Updated Time 2022-07-16
CVE ID CVE-2021-40444

Summary

The attacker can use this vulnerability to construct a malicious office document and send it to the attacked party, resulting in remote code execution.

Affected Versions

Windows 7 for 32/x64-based Systems Service Pack 1 Windows RT 8.1 Windows 8.1/10 for 32/x64-based Systems Windows 10 Version 1607 for 32/x64-based Systems Windows 10 Version 2004/1809/1909/20H2/21H1 for 32/x64/ARM64-based Systems Windows Server 2012/2012 R2/2016/2022 Windows Server 2008 R2 for x64-based Systems Service Pack 1/2 Windows Server 2004/2012/2012 R2/2016/2019/20H2/2022 (Server Core installation)

Solution

At present, the latest version has been officially released, please update the version in time, detailed link: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444

Listen To This Post

Search

Get in Touch

Get in Touch with Sangfor Team for Business Inquiry

Name
Email Address
Business Phone Number
Tell us about your project requirements

Related Articles

CVE-2024-47575: Fortinet FortiManager Authentication Vulnerability

Date : 25 Oct 2024
Read Now

CVE-2024-38819: Path Traversal Vulnerability

Date : 19 Oct 2024
Read Now

CVE-2024-40766: SonicWALL SonicOS Access Control Flaw Vulnerability

Date : 12 Sep 2024
Read Now

See Other Product

Cyber Command - NDR Platform
Endpoint Secure
Internet Access Gateway (IAG)
Sangfor Network Secure - Next Generation Firewall
Platform-X
Sangfor Access Secure