CVE-2024-43573

HighCVSS 8.1/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows MSHTML Platform Spoofing Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 8, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Oct 8, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-435748.3Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution VulnerabilityCVE-2024-435757.5Windows Hyper-V Denial of Service VulnerabilityCVE-2024-435767.8Microsoft Office Remote Code Execution VulnerabilityCVE-2024-435774.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-435788.3Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-435798.3Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-43589.8In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik CVE-2024-435805.4Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-435817.1Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityCVE-2024-435828.1Remote Desktop Protocol Server Remote Code Execution VulnerabilityCVE-2024-435837.8Winlogon Elevation of Privilege VulnerabilityCVE-2024-435848.4Windows Scripting Engine Security Feature Bypass Vulnerability
CVE-2024-43573: High severity, CVSS 8.1 | Vulnix