Lucene search
CISACISA:C70D91615E3DC8B589B493118D474566HistorySep 07, 2021 - 12:00 a.m.
Microsoft Releases Mitigations and Workarounds for CVE-2021-40444
2021-09-0700:00:00
us-cert.cisa.gov
347
0.968 High
EPSS
Percentile
99.7%
Microsoft has released mitigations and workarounds to address a remote code execution vulnerability (CVE-2021-40444) in Microsoft Windows. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. This vulnerability has been detected in exploits in the wild.
CISA encourages users and administrators to review [Microsoft’s advisory](<https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444 >) and to implement the mitigations and workarounds.
This product is provided subject to this Notification and this Privacy & Use policy.
Please share your thoughts.
We recently updated our anonymous product survey; we’d welcome your feedback.
Related
trendmicroblog
trendmicroblog
threatpost
threatpost
Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang
2021-09-17 12:07:59
Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows
2021-09-08 12:24:51
Google Blows Lid Off Conti, Diavol Ransomware Access-Broker Ops
2022-03-18 14:49:01
githubexploit
githubexploit
Exploit for Path Traversal in Microsoft
2021-09-14 20:32:28
Exploit for Vulnerability in Microsoft
2021-09-11 05:31:52
Exploit for Vulnerability in Microsoft
2021-09-08 08:32:40
thn
thn
Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets
2022-01-25 14:04:00
prion
prion
Remote code execution
2021-09-15 12:15:00
nvd
nvd
CVE-2021-40444
2021-09-15 12:15:16
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer MSHTML Remote Code Execution (CVE-2021-40444)
2021-09-09 00:00:00
metasploit
metasploit
Microsoft Office Word Malicious MSHTML RCE
2021-11-09 11:18:58
cisa_kev
cisa_kev
Microsoft MSHTML Remote Code Execution Vulnerability
2021-11-03 00:00:00
trellix
trellix
malwarebytes
malwarebytes
MSHTML attack targets Russian state rocket centre and interior ministry
2021-09-22 19:16:56
[updated] Windows MSHTML zero-day actively exploited, mitigations required
2021-09-08 11:04:07
Meet Exotic Lily, access broker for ransomware and other malware peddlers
2022-03-18 22:58:48
mscve
mscve
Microsoft MSHTML Remote Code Execution Vulnerability
2021-09-07 07:00:00
krebs
krebs
Microsoft: Attackers Exploiting Windows Zero-Day Flaw
2021-09-08 15:03:45
Microsoft Patch Tuesday, September 2021 Edition
2021-09-14 21:00:42
nessus
nessus
Security Updates for Internet Explorer (September 2021)
2021-09-14 00:00:00
KB5005569: Windows 10 version 1507 LTS September 2021 Security Update
2021-09-14 00:00:00
kitploit
kitploit
securelist
securelist
Exploitation of the CVE-2021-40444 vulnerability in MSHTML
2021-09-16 15:30:57
IT threat evolution Q3 2021
2021-11-26 12:00:36
packetstorm
packetstorm
Microsoft Office Word MSHTML Remote Code Execution
2021-12-09 00:00:00
Microsoft Office MSDT Follina Proof Of Concept
2022-05-31 00:00:00
avleonov
avleonov
ics
ics
2021 Top Malware Strains
2022-08-25 12:00:00
2021 Top Routinely Exploited Vulnerabilities
2022-04-28 12:00:00
cvelist
cvelist
CVE-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability
2021-09-15 11:24:26
mmpc
mmpc
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-12-10 21:36:13
Patch Tuesday - September 2021
2021-09-15 03:44:31
talosblog
talosblog
Threat Source newsletter (March 9, 2023) — Stop freaking out about ChatGPT
2023-03-09 19:00:12
zdt
zdt
Microsoft Office Word MSHTML Remote Code Execution Exploit
2021-12-09 00:00:00
attackerkb
attackerkb
CVE-2021-40444
2021-09-15 00:00:00
CVE-2022-30190
2022-06-01 00:00:00
kaspersky
kaspersky
KLA12278 RCE vulnerability in Microsoft Products (ESU)
2021-09-07 00:00:00
KLA12277 RCE vulnerability in Microsoft Windows
2021-09-07 00:00:00
mssecure
mssecure
cve
cve
CVE-2021-40444
2021-09-15 12:15:16
hivepro
hivepro
New Threat Actor Exotic Lily acting as Initial Access Broker for Conti and Diavol ransomware group
2022-03-21 05:34:00
Weekly Threat Digest: 14 – 20 March 2022
2022-03-23 04:17:40
cnvd
cnvd
Microsoft MSHTML Remote Code Execution Vulnerability
2021-09-08 00:00:00
pentestpartners
pentestpartners
Follina 0day exploit. Malicious code execution in Office docs
2022-06-01 05:38:30
mskb
mskb
September 14, 2021—KB5005606 (Monthly Rollup)
2021-09-14 07:00:00
googleprojectzero
googleprojectzero
2022 0-day In-the-Wild Exploitation…so far
2022-06-30 00:00:00
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5005613)
2021-09-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5005633)
2021-09-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5005573)
2021-09-15 00:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday (September 2021) – Microsoft 60 Vulnerabilities with 3 Critical, Adobe 61 Vulnerabilities
2021-09-14 18:56:17
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00