Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents.
An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Microsoft Defender Antivirus and Microsoft Defender for Endpoint both provide detection and protections for the known vulnerability. Customers should keep antimalware products up to date. Customers who utilize automatic updates do not need to take additional action. Enterprise customers who manage updates should select the detection build 1.349.22.0 or newer and deploy i
Connections 42
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 202278be611d-cdc1-4ca6-82c4-ead338e11971
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 10 Version 20H2f6b2aa56-0938-49d7-b5d6-9cffc9f8c65d
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server version 20040a320aa3-f1a8-4e63-9497-d70be969238d
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 10 Version 21H1c6ae7079-d566-434e-8aed-2f264f494c8b
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 201608188fe4-2083-47ba-bb9d-71f6efee120c
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)7752d422-58ce-4b82-9892-4217e7e1cf98
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 8.17d95c86f-d3ab-4144-b191-85942558a12b
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 73d392f57-890c-4b5b-929c-ed2891fa3a79
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 10 Version 2004def65bb7-6105-4e49-a7d0-969717c31c80
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2008 R2 Service Pack 14a768dd1-ee7d-447a-9cc4-f12d6853a59b
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 20128e799cae-ea3c-46e9-87c0-f1c1dbef7b3e
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2008 Service Pack 2b92f8094-9964-4200-9457-d2e2a1437a57
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2012 (Server Core installation)7a13df96-4116-447e-b922-7edc486da709
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server version 20H274b9e4e0-21b5-4248-8143-3fa6830e5580
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2016 (Server Core installation)4ba3568b-0b58-4740-8210-0225ef875b40
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2012 R2 (Server Core installation)055634d0-ee2e-46ca-a733-1bd9dd93ca44
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 10 Version 1909a865e273-0242-4cfe-9365-a37beb15ca10
has cited scope2 retained · stored CVE-2021-40444 → Microsoft · Windows 10 Version 180901fb9f20-6147-4c09-b927-ce0060eed4f6ae79d58a-48b4-44a5-a05e-aa7f163e5fb0
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 7 Service Pack 128cf8ce9-ba8a-4bcb-8f07-42240924d15b
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)9e700a6a-c61c-437e-8c37-7c8704e916fe
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 10 Version 150726444c44-18c9-4f48-afd8-edd9de15e619
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 201915edeada-1bf5-4eef-b39b-d1ecca0e2f8e
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows 10 Version 160718f3133e-61a4-4dbd-bde2-b80dfdac2537
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2012 R25be235aa-da71-454b-9cd7-860adefc8b05
has cited scope1 retained · stored CVE-2021-40444 → Microsoft · Windows Server 2019 (Server Core installation)d43c713f-bf6b-4dd6-912f-b3470dd2f0aa
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_server_2016fc343d63-7b27-449a-847f-3d359e992e87
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_rt_8.128ac04a0-0019-4333-8ffb-481a3f73d05c
has vulnerable target scope2 retained · stored CVE-2021-40444 → microsoft · windows_server_200863d5b012-33cf-4f31-9049-0a3eb4ddf6c39681c79d-5ad6-4dec-95d0-d6a37e9aecd5
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_server_2019fd3cabd4-867d-400a-aaef-ca0f00dc9cbc
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_server_20h255f7f5d3-0bc7-4626-a28f-b6a16a5a406e
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_10_20h2e7908ec2-28a2-44c4-990c-75b33240a102
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_server_2004a51e2349-bc54-4273-8658-a7470ed8285b
has vulnerable target scope2 retained · stored CVE-2021-40444 → microsoft · windows_server_2012bf6f211f-65c7-4632-9b6c-d03bcedfaa07dd3c5f9d-a034-4dfa-bb22-c0ac99f48e79
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_10_16077419f854-88d2-4a41-bf8a-1d7c73b8a912
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_8.180a9b90d-d2fe-420a-83c4-aa0c7b9aae0a
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_10_15074faba7d4-9f82-4ea0-aa62-36ea1af21415
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_10_20047ddc3037-8297-47a1-a204-9c037fe1264e
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_10_1809a5dfe554-ef30-4da7-87c1-f9c2f850f8cf
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_server_2022994a17b0-fa4e-4a54-a8ab-8213517ce743
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_10_21h1390e4df8-0f67-4041-8c1f-508494a0eb09
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_10_19095833ee07-846d-48ad-9781-52197229bc0f
has vulnerable target scope1 retained · stored CVE-2021-40444 → microsoft · windows_77ca52598-eba0-4f8c-b135-238f5727122f