Patch
CVE-2024-43461
with vRx
Vulnerability Overview
CVE Name
CVE-2024-43461
Severity
8.8
High
CVE Description
Windows MSHTML Platform Spoofing Vulnerability
Show more
Show less
Latest Patch info
Patch Name
secure@microsoft.com
Date
10.09.2024
Script

Script Type
Remediation script
❗ CVE-2024-43461 is a spoofing vulnerability in the MSHTML platform on Windows systems. This flaw allows attackers to deceive users by disguising malicious files as legitimate ones. When exploited as part of an attack chain, such as with CVE-2024-38112, this vulnerability can enable the delivery of malware, such as info-stealers, by tricking users into interacting with compromised files. The attack often starts by forcing the use of Internet Explorer to open malicious content, bypassing normal security mechanisms.
ℹ️ This mitigation script ensures that MSHTML is disabled by performing the following actions:
Create Registry Path (if missing):
Checks if the registry path HKLM:\SOFTWARE\Policies\Microsoft\Windows\IE\Security exists. If not, it creates the required path to enable configuration.
Confirms the creation of the registry path.
Disable MSHTML:
Sets the registry value DisableMSHTML to 1, effectively disabling the MSHTML platform.
Provides feedback that MSHTML has been successfully disabled and advises that a system restart may be required for changes to take effect.
✅ Running this mitigation script ensures that your system is protected against CVE-2024-43461 by deactivating the MSHTML platform.
Read more
Read less
Affected OS & Apps
Windows 11 24H2
by
Microsoft
Windows Server 2022 23H2
by
Microsoft
Windows 11 23H2
by
Microsoft
Show more
Patch faster and smarter
with vRx
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Trusted by 600+ customers:




Solution
Patch faster and better with vRx
Patch Management
vRx automatically deploys patches across all systems, cutting patching time by 80%.
Scripting Engine
vRx’s scripting engine solves complex vulnerabilities, like log4j, with built-in or custom scripts.
Patchless Protection
vRx’s Patchless Protection secures vulnerable apps and reduces risk while maintaining functionality.

Automated Patching, Scripting, and more
Talk with our team to get a personal walkthrough
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.