CVE-2021-40444

mediumPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEPSS 0.978 · 100. PerzentilExploit · waffenfähigEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 35 exploits · waffenfähig

Likely / severe?

97.8% (100th) EPSS

CVSS 6.8 · medium

Is it mine?

153 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · msrc_csaf

hinzugefügt 2021-11-03beheben bis 2021-11-17

erforderliche Maßnahme Apply updates per vendor instructions.

EPSS · bewertet 2026-10-27

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Microsoft Defender Antivirus and Microsoft Defender for Endpoint both provide detection and protections for the known vulnerability. Customers should keep antimalware products up to date. Customers who utilize automatic updates do not need to take additional action. Enterprise customers who manage updates should select the detection build 1.349.22.0 or newer and deploy it across their environments. Microsoft Defender for Endpoint alerts will be displayed as: “Suspicious Cpl File Execution”. Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs. Please see the Mitigations and Workaround sections for important information about steps you can take to protect your system from this vulnerability. UPDATE September 14, 2021: Microsoft has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. Please see the FAQ for important information about which updates are applicable to your system.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenWindows 10 Version 1607 for 32-bit Systemsmsrc_csaf
10.0.14393.4651:Security Update:https://support.microsoft.com/help/5005573
https://support.microsoft.com/help/5005573
BehobenWindows 10 Version 1607 for x64-based Systemsmsrc_csaf
10.0.14393.4651:Security Update:https://support.microsoft.com/help/5005573
https://support.microsoft.com/help/5005573
BehobenWindows 10 Version 1809 for 32-bit Systemsmsrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
BehobenWindows 10 Version 1809 for ARM64-based Systemsmsrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
BehobenWindows 10 Version 1809 for x64-based Systemsmsrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
BehobenWindows 10 Version 1909 for 32-bit Systemsmsrc_csaf
10.0.18363.1801:Security Update:https://support.microsoft.com/help/5005566
https://support.microsoft.com/help/5005566
BehobenWindows 10 Version 1909 for ARM64-based Systemsmsrc_csaf
10.0.18363.1801:Security Update:https://support.microsoft.com/help/5005566
https://support.microsoft.com/help/5005566
BehobenWindows 10 Version 1909 for x64-based Systemsmsrc_csaf
10.0.18363.1801:Security Update:https://support.microsoft.com/help/5005566
https://support.microsoft.com/help/5005566
BehobenWindows 10 Version 2004 for 32-bit Systemsmsrc_csaf
10.0.19041.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows 10 Version 2004 for ARM64-based Systemsmsrc_csaf
10.0.19041.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows 10 Version 2004 for x64-based Systemsmsrc_csaf
10.0.19041.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows 10 Version 20H2 for 32-bit Systemsmsrc_csaf
10.0.19042.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows 10 Version 20H2 for ARM64-based Systemsmsrc_csaf
10.0.19042.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows 10 Version 21H1 for 32-bit Systemsmsrc_csaf
10.0.19043.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows 10 Version 21H1 for ARM64-based Systemsmsrc_csaf
10.0.19043.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows 10 Version 21H1 for x64-based Systemsmsrc_csaf
10.0.19043.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows 10 for 32-bit Systemsmsrc_csaf
10.0.10240.19060:Security Update:https://support.microsoft.com/help/5005569
https://support.microsoft.com/help/5005569
BehobenWindows 10 for x64-based Systemsmsrc_csaf
10.0.10240.19060:Security Update:https://support.microsoft.com/help/5005569
https://support.microsoft.com/help/5005569
BehobenWindows 7 for 32-bit Systems Service Pack 1msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows 7 for x64-based Systems Service Pack 1msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows 8.1 for 32-bit systemsmsrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows 8.1 for x64-based systemsmsrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows RT 8.1msrc_csaf
6.3.9600.20120:Monthly Rollup:https://support.microsoft.com/help/5005613
https://support.microsoft.com/help/5005613
BehobenWindows Server 2008 R2 for x64-based Systems Service Pack 1msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2008 for 32-bit Systems Service Pack 2msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2008 for x64-based Systems Service Pack 2msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2012msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2012 (Server Core installation)msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2012 R2msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2012 R2 (Server Core installation)msrc_csaf
1.001:IE Cumulative:https://support.microsoft.com/help/5005563
https://support.microsoft.com/help/5005563
BehobenWindows Server 2016msrc_csaf
10.0.14393.4651:Security Update:https://support.microsoft.com/help/5005573
https://support.microsoft.com/help/5005573
BehobenWindows Server 2016 (Server Core installation)msrc_csaf
10.0.14393.4651:Security Update:https://support.microsoft.com/help/5005573
https://support.microsoft.com/help/5005573
BehobenWindows Server 2019msrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
BehobenWindows Server 2019 (Server Core installation)msrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
BehobenWindows Server 2022msrc_csaf
10.0.20348.230:Security Update:https://support.microsoft.com/help/5005575
https://support.microsoft.com/help/5005575
BehobenWindows Server 2022 (Server Core installation)msrc_csaf
10.0.20348.230:Security Update:https://support.microsoft.com/help/5005575
https://support.microsoft.com/help/5005575
BehobenWindows Server, version 2004 (Server Core installation)msrc_csaf
10.0.19041.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
BehobenWindows Server, version 20H2 (Server Core Installation)msrc_csaf
10.0.19042.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.8–8.8

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 6.4

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:P/E:Hsecondary · CVSS-BT (t0sche)

v3.18.8highAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:Lsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:Lsecondary · secure@microsoft.com USAusnutzbarkeit 2.8 · Auswirkung 5.3

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:P/RL:O/RC:Csecondary · Microsoft Security Response Center US

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:P/RL:O/RC:Csecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-22USprimärCWE-94US

Exploits (35)

Öffentlicher Proof-of-Concept- und Exploit-Code.

exploit/windows/fileformat/word_mshtml_rceMicrosoft Office Word Malicious MSHTML RCEwaffenfähig · metasploit
34zY/Microsoft-Office-Word-MSHTML-Remote-Code-Execution-ExploitCVE-2021-40444PoC · poc_in_github
Alexcot25051999/CVE-2021-40444Alexcot25051999/CVE-2021-40444PoC · poc_in_github
DarkSprings/CVE-2021-40444CVE-2021-40444 POCPoC · poc_in_github
Edubr2020/CVE-2021-40444--CABlessModified code so that we don´t need to rely on CAB archivesPoC · poc_in_github
H0j3n/CVE-2021-40444H0j3n/CVE-2021-40444PoC · poc_in_github

betroffene Produkte (153)

Betroffene Produkte und Versionsbereiche.

Microsoft Windows 10 Version 150710.0.10240.0 → 10.0.10240.19060enisa_euvdEU
Microsoft Windows 10 Version 160710.0.14393.0 → 10.0.14393.4651enisa_euvdEU
Microsoft Windows 10 Version 180910.0.0 → 10.0.17763.2183enisa_euvdEU
Microsoft Windows 10 Version 180910.0.17763.0 → 10.0.17763.2183enisa_euvdEU
Microsoft Windows 10 Version 190910.0.0 → 10.0.18363.1801enisa_euvdEU
Microsoft Windows 10 Version 200410.0.0 → 10.0.19041.1237enisa_euvdEU
Microsoft Windows 10 Version 20H210.0.0 → 10.0.19042.1237enisa_euvdEU
Microsoft Windows 10 Version 21H110.0.0 → 10.0.19043.1237enisa_euvdEU
Microsoft Windows 76.1.0 → 6.1.7601.25712enisa_euvdEU
Microsoft Windows 7 Service Pack 16.1.0 → 6.1.7601.25712enisa_euvdEU
Microsoft Windows 8.16.3.0 → 6.3.9600.20120enisa_euvdEU
Microsoft Windows Server 2008 R2 Service Pack 16.1.7601.0 → 6.1.7601.25712enisa_euvdEU
Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)6.1.7601.0 → 6.1.7601.25712enisa_euvdEU
Microsoft Windows Server 2008 Service Pack 26.0.6003.0 → 6.0.6003.21218enisa_euvdEU
Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)6.0.6003.0 → 6.0.6003.21218enisa_euvdEU
Microsoft Windows Server 20126.2.9200.0 → 6.2.9200.23462enisa_euvdEU
Microsoft Windows Server 2012 (Server Core installation)6.2.9200.0 → 6.2.9200.23462enisa_euvdEU
Microsoft Windows Server 2012 R26.3.9600.0 → 6.3.9600.20120enisa_euvdEU
Microsoft Windows Server 2012 R2 (Server Core installation)6.3.9600.0 → 6.3.9600.20120enisa_euvdEU
Microsoft Windows Server 201610.0.14393.0 → 10.0.14393.4651enisa_euvdEU

20 von 153 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

msrc_CVE-2021-40444Microsoft MSHTML Remote Code Execution Vulnerability2021-09-07csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu msrc_csaf NVD CVE.org MITRE

veröffentlicht 2021-09-15geändert 2026-08-10

verwandt (12,525)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-104286US	—OT kritisch	4.57% (92nd)	KEV	2026-10-01
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail…
CVE-2026-93616US	—OT kritisch	91.6% (100th)	KEV	2026-09-22
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
CVE-2026-85706US	—OT kritisch	97.4% (100th)	KEV	2026-09-12
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2…
CVE-2026-66384US	—OT kritisch	0.66% (52nd)	KEV	2026-08-12
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CVE-2026-59310US	—OT kritisch	2.56% (85th)	KEV	2026-07-30
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

+12520 weitere

Referenzen (17)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan