EXPOSURES › CVE-2024-30040
CVE-2024-30040
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Windows MSHTML platform bypassed security features, enabling attackers to circumvent browser protections.
This vulnerability allows attackers to bypass security features in the Windows MSHTML platform, potentially undermining browser hardening and sandboxing mechanisms. DIB organizations must patch immediately to prevent unauthorized access to sensitive systems through compromised web browsers.
Shame score — A security feature bypass vulnerability that is actively exploited but lacks specific RCE details, resulting in moderate embarrassment.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |