CVE-2024-43461

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 6 articles

VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

9.9%

probability

This CVE has a 9.9% probability of being exploited in the next 30 days.

0% Top 93.1th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-221 · Information Loss or Omission CWE-451 · User Interface (UI) Misrepresentation of Critical Information CWE-664 · Improper Control of a Resource Through its Lifetime CWE-684 · Incorrect Provision of Specified Functionality CWE-710 · Improper Adherence to Coding Standards

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

TheHackerNews

Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

TheHackerNews

Windows vulnerability abused braille “spaces” in zero-day attacks

BleepingComputer Sep 15, 2024

New Windows zero-day exploited by 11 state hacking groups since 2017

BleepingComputer Mar 18, 2025

CISA warns of Windows flaw used in infostealer malware attacks

BleepingComputer Sep 16, 2024

Microsoft September 2024 Patch Tuesday fixes 4 zero-days, 79 flaws

BleepingComputer Sep 10, 2024

Signal Intelligence

Confidenceⓘ

85%

EPSS 9.9%

Mentions 6

Last Seen Mar 18, 2025

CNA Information

Analyst Note

CVE-2024-43461 is explicitly named as a zero-day in multiple BleepingComputer articles reporting active exploitation by state-sponsored groups since 2017. The CVE was published 2024-09-10 and patched in Microsoft's September 2024 Patch Tuesday, with exploitation documented prior to patch availability. The evidence of active in-the-wild exploitation with clear timing alignment supports zero-day classification.