CVE-2024-43461

ENISA EUVD: EUVD-2024-40730 ↗

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 6 articles Published: 2024-09-10

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-23

9.9%

probability

This CVE has a 9.9% probability of being exploited in the next 30 days.

0% Top 93.1th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)

8.8

HIGH

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Temporal

Exploit Code Maturity

Functional

Remediation Level

Official Fix

Report Confidence

Confirmed

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Description

NVD

Windows MSHTML Platform Spoofing Vulnerability

Affected Products

Microsoft

Windows 11 Version 24H2

10.0.26100.0

Microsoft

Windows 10 Version 1809

10.0.17763.0

Microsoft

Windows Server 2019

10.0.17763.0

Microsoft

Windows Server 2019 (Server Core installation)

10.0.17763.0

Microsoft

Windows Server 2022

10.0.20348.0

microsoft

windows 10 1507

microsoft

windows 10 1607

microsoft

windows 10 1809

microsoft

windows 10 21h2

microsoft

windows 10 22h2

Microsoft

Windows 10 Version 1507

10.0.10240.0 <10.0.10240.20766

Microsoft

Windows Server 2008 Service Pack 2

6.0.6003.0 <6.0.6003.22870

Microsoft

Windows 11 version 22H2

10.0.22621.0 <10.0.22621.4169

Microsoft

Windows 11 version 22H3

10.0.22631.0 <10.0.22631.4169

Microsoft

Windows Server 2008 R2 Service Pack 1

6.1.7601.0 <6.1.7601.27320

Microsoft

Windows 10 Version 22H2

10.0.19045.0 <10.0.19045.4894

Microsoft

Windows Server 2016 (Server Core installation)

10.0.14393.0 <10.0.14393.7336

Microsoft

Windows Server 2008 Service Pack 2

6.0.6003.0 <6.0.6003.22870

Microsoft

Windows Server 2012 R2 (Server Core installation)

6.3.9600.0 <6.3.9600.22175

Microsoft

Windows Server 2012 R2

6.3.9600.0 <6.3.9600.22175

Microsoft

Windows Server 2022

10.0.20348.0 <10.0.20348.2700

Microsoft

Windows Server 2012

6.2.9200.0 <6.2.9200.25073

Microsoft

Windows 11 version 21H2

10.0.0 <10.0.22000.3197

Microsoft

Windows 11 Version 23H2

10.0.22631.0 <10.0.22631.4169

Microsoft

Windows Server 2008 R2 Service Pack 1 (Server Core installation)

6.1.7601.0 <6.1.7601.27320

Microsoft

Windows Server 2019

10.0.17763.0 <10.0.17763.6293

Microsoft

Windows Server 2022, 23H2 Edition (Server Core installation)

10.0.25398.0 <10.0.25398.1128

Microsoft

Windows Server 2016

10.0.14393.0 <10.0.14393.7336

Microsoft

Windows 10 Version 1607

10.0.14393.0 <10.0.14393.7336

Microsoft

Windows Server 2019 (Server Core installation)

10.0.17763.0 <10.0.17763.6293

Microsoft

Windows 10 Version 21H2

10.0.19043.0 <10.0.19044.4894

Microsoft

Windows Server 2012 (Server Core installation)

6.2.9200.0 <6.2.9200.25073

Microsoft

Windows 10 Version 1809

10.0.17763.0 <10.0.17763.6293

Microsoft

Windows 11 Version 24H2

10.0.26100.0 <10.0.26100.1742

Microsoft

Windows Server 2008 Service Pack 2 (Server Core installation)

6.0.6003.0 <6.0.6003.22870

Attack Intelligence

CWE-221 CWE-451 · User Interface (UI) Misrepresentation of Critical Information CWE-664 · Improper Control of a Resource Through its Lifetime CWE-684 CWE-710 · Improper Adherence to Coding Standards

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461

vendor-advisory

Signal Intelligence

Confidenceⓘ

85%

EPSS 9.9%

CVSS v3.1 8.8

Mentions 6

Last Seen Mar 18, 2025

CNA Information

CNA Assigner

microsoft

CNA Title

Windows MSHTML Platform Spoofing Vulnerability

Analyst Note

CVE-2024-43461 is explicitly named as a zero-day in multiple BleepingComputer articles reporting active exploitation by state-sponsored groups since 2017. The CVE was published 2024-09-10 and patched in Microsoft's September 2024 Patch Tuesday, with exploitation documented prior to patch availability. The evidence of active in-the-wild exploitation with clear timing alignment supports zero-day classification.