CVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.
Other sources
Windows MSHTML Platform Spoofing Vulnerability
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.27320Fixed in 1.001Patch KB5043049 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22175Patch KB5043138 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22175Fixed in 1.001Patch KB5043049 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.22870Patch KB5043087 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7336Patch KB5043051 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25073Fixed in 1.001Patch KB5043049 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25073Patch KB5043125 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20766Patch KB5043083 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.4169Patch KB5043076 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1128Patch KB5043055 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.4894Patch KB5043064 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.4169Patch KB5043076 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.4894Patch KB5043064 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.3197Patch KB5043067 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.6293Patch KB5043050 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2700Fixed in 10.0.20348.2695Patch KB5042880 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.1742Patch KB5043080
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43461?
CVE-2024-43461 is considered a critical vulnerability due to its ability to allow attackers to spoof user interface elements.
How do I fix CVE-2024-43461?
To fix CVE-2024-43461, apply the necessary security patches provided by Microsoft for your affected Windows version.
Which versions of Windows are affected by CVE-2024-43461?
CVE-2024-43461 affects various versions of Windows including Windows 10, Windows 11, and several Windows Server editions.
What are the potential impacts of CVE-2024-43461?
If exploited, CVE-2024-43461 can lead to phishing attacks by allowing attackers to display misleading information on spoofed web pages.
Has CVE-2024-43461 been actively exploited?
Yes, CVE-2024-43461 has been reported to be exploited in the wild alongside other vulnerabilities such as CVE-2024-38112.