Threat actors exploited Windows 0-day for more than a year before Microsoft fixed it

Quick Summary:

The goal of the exploits was to open Explorer and trick targets into running malicious code.

The vulnerability, which resided in the MSHTML engine of Windows, carried a severity rating of 7.0 out of 10.

The company fixed the vulnerability, tracked as CVE-2024-CVE-38112, on Tuesday as part of its monthly patch release program.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Dan Goodin

Category: Technology

Markets: United StatesMali

Topics: Security Patches Zero days Microsoft Vulnerabilities

Source Website Secure: Yes (HTTPS)

News Sentiment: Neutral

Fact Checked: Legitimate

Article Type: News Report

Published On: 2024-07-10 @ 21:44:12 (2 weeks ago)

News Timezone: GMT -5:00

News Source URL: arstechnica.com

Language: English

Article Length: 159 words

Reading Time: 1 minutes read

Sentences: 34 lines

Sentence Length: 5 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Ars Technica

News ID: 21568973

View Article Analysis

About Ars Technica

Main Topics: Technology

Official Website: arstechnica.com

Update Frequency: 3 posts per day

Year Established: 1998

Headquarters: United States

News Last Updated: 15 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT -5:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #32

Publisher Details

Frequently Asked Questions