CVE-2021-33742

Windows MSHTML Platform Remote Code Execution Vulnerability

Recent assessments:

NinjaOperator at June 16, 2021 10:56pm UTC reported:

Windows MSHTML Platform (Microsoft proprietary browser engine) enables RCE and is being actively exploited in limited campaigns.
 Exploitation requires user interaction; thus, feasible threat scenarios include drive-by download, exploit kits, and phishing links.
 A commercial exploit company reportedly provided the exploit code to Eastern European and Middle Eastern state-sponsored actors

gwillcox-r7 at June 17, 2021 5:25pm UTC reported:

Windows MSHTML Platform (Microsoft proprietary browser engine) enables RCE and is being actively exploited in limited campaigns.
 Exploitation requires user interaction; thus, feasible threat scenarios include drive-by download, exploit kits, and phishing links.
 A commercial exploit company reportedly provided the exploit code to Eastern European and Middle Eastern state-sponsored actors

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0