High

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited1 source record

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Announced 14 May 2024Source revision 1

Original source ↗

CVE-2024-30040

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2024-30040

Windows

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2024-30040
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2024-30040 · High

Windows 10 Version 1809, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation)

Event: #1148 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:57:02 GMT
Publisher date: Tue, 14 May 2024 00:00:00 GMT

Read the original announcement