CVE Watch10 de ago. de 2026

CVE-2024-43461

Microsoft Windows MSHTML Platform Spoofing Vulnerability

CVSS

8.8

Alta

EPSS

54.5%

p99

KEV

SIM

16 de set. de 2024

Exploit Today

0-100

Publicado: 10 de set. de 2024 · Última mod.: 10 de ago. de 2026 · CWE-451

EPSS · 30d

54.5%EPSS · 30 dias54.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Windows

Vulnerabilidade

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Adicionado ao KEV

16 de set. de 2024

Corrigir até

7 de out. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43461

Descrição técnica

Windows MSHTML Platform Spoofing Vulnerability

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1212445.4 MÉD

7.1%

——2UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)8h CVE-2026-1212165.4 MÉD

7.1%

——2UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)7h CVE-2026-1212155.4 MÉD

7.1%

——2UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)7h CVE-2026-121209—

8.2%

——2UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)2d CVE-2026-1212065.4 MÉD

7.1%

——2UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)7h CVE-2026-121190—

6.5%

——2UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Low)2d