{"uuid": "d913d87c-353b-42ac-98ac-4e65b25f245f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40444", "type": "seen", "source": "https://t.me/hacking_Attack/23248", "content": "Black Hat Ethical Hacking\nWindows MSHTML zero-day defenses bypassed as new info emerges\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Windows MSHTML zero-day defenses bypassed as new info emergesPost Views: 39 \nReading Time: 1 Minute\nThis Internet Explorer MSHTML remote code execution vulnerability, tracked as CVE-2021-40444, was disclosed by Microsoft on Tuesday\u00a0but with few details as it has not been patched yet.\nThe only information shared by Microsoft was that the vulnerability uses malicious ActiveX controls to exploit Office 365 and Office 2019 on Windows 10 to download and install malware on an affected computer.\n\nSince then, researchers have found the malicious Word documents used in the attacks and have learned new information about how the vulnerability is exploited. Why the\u00a0CVE-2021-40444 zero-day is so criticalSince the release of this vulnerability, security researchers have taken to Twitter to warn how dangerous it is even though Microsoft Office\u2019s \u2018Protected View\u2019 feature will block the exploit.\n\nWhen Office opens a document it checks if it is tagged with a \u201cMark of the Web\u201d (MoTW), which means it originated from the Internet.\n\nIf this tag exists, Microsoft will open the document in read-only mode, effectively blocking the exploit unless a user clicks on the \u2018Enable Editing\u2019 buttons.\nhttps://www.bleepstatic.com/images/news/Microsoft/vulnerabilities/CVE-2021-40444/protected-view-maldoc.jpg \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:24.873200Z"}