CVE-2024-30040

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
3.9%
EPSS
91%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.

Vendor
Microsoft
Product
Windows
Added to KEV
May 14, 2024
Remediation due
Jun 4, 2024 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-20
EPSS
3.9% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded