CVE-2023-35336

Summary

CVE-2023-35336 is a security vulnerability affecting the MSHTML platform in Windows. Attackers can exploit this feature bypass issue to gain elevated privileges, potentially leading to the compromise of the affected system. This vulnerability allows an attacker to load and execute malicious code through specially crafted web content, bypassing security controls. Microsoft has released a patch to address this issue, and it is recommended that users apply it as soon as possible to protect against potential attacks. Failure to apply the patch could result in a successful exploitation, allowing an attacker to install programs, view, change, or delete data, or create new accounts with full user rights.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.