CVE-2021-34446: Windows HTML Platforms Security Feature Bypass Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.4530Patch KB5004238 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.25661Fixed in 1.001Patch KB5005563 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20069Patch KB5004298 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20069Fixed in 1.001Patch KB5005563 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.2061Patch KB5004244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.23409Fixed in 1.001Patch KB5005563 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.21167Fixed in 1.001Patch KB5005563 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19041.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.19003Patch KB5004249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.18363.1679Patch KB5004245
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34446?
CVE-2021-34446 has a severity rating of important, indicating a high potential impact if exploited.
How do I fix CVE-2021-34446?
To fix CVE-2021-34446, install the required security update provided by Microsoft for your version of Windows.
What systems are affected by CVE-2021-34446?
CVE-2021-34446 affects multiple versions of Microsoft Windows, including Windows 7, 8.1, 10, and various Windows Server editions.
Can CVE-2021-34446 be exploited remotely?
Yes, CVE-2021-34446 can be exploited by attackers remotely to bypass security features on affected systems.
Are there any workarounds for CVE-2021-34446?
While the recommended solution is to apply the security updates, disabling specific services may serve as a temporary workaround for CVE-2021-34446.