logo

Microsoft MSHTML Remote Code Execution Vulnerability

ID: 31d80110-56b8-5f3f-92cc-68098bf63983

STIX ID: report--31d80110-56b8-5f3f-92cc-68098bf63983

Feed Name: Zscaler Security Research Blog

Threat Score
75/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

**Microsoft MSHTML RCE (CVE-2021-40444) advisory:** Microsoft disclosed a remote code execution vulnerability in MSHTML (CVSS 8.8) that has been observed exploited in the wild; the advisory enumerates affected Windows versions, mitigation steps (disable ActiveX / Protected View), and signatures added by Zscaler to detect exploitation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.