CVE Watch10 ago 2026

CVE-2024-43461

Microsoft Windows MSHTML Platform Spoofing Vulnerability

CVSS

8.8

Alto

EPSS

54.5%

p99

KEV

SÍ

16 sept 2024

Exploit Today

0-100

Publicado: 10 sept 2024 · Última mod.: 10 ago 2026 · CWE-451

EPSS · 30d

51.9%EPSS · 30 días54.5%

2026-08-022026-08-30

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Añadido a KEV

16 sept 2024

Remediar antes de

7 oct 2024

Uso conocido en ransomware

Descripción resumida

Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43461

Descripción técnica

Windows MSHTML Platform Spoofing Vulnerability

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-792844.3 MED

13.7%

——4UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)4d CVE-2026-792835.4 MED

9.6%

——3UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)3d CVE-2026-792505.4 MED

16.2%

——5UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)3d CVE-2026-792334.3 MED

8.7%

——3UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)3d CVE-2026-792045.4 MED

16.1%

——5UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)3d CVE-2026-791805.4 MED

16.1%

——5UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)3d