Skip to content
feed: live
0dayNews
CVE Record
[ HIGH ]CVE-2021-33742

Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.

Vendor
Microsoft
Product
Windows
CVSS
7.5
EPSS (exploit probability)
59.4%
Status
kev
CISA patch-by (BOD 22-01)
Added to KEV

Is CVE-2021-33742 being exploited?

Yes. CISA added CVE-2021-33742 to its Known Exploited Vulnerabilities catalog on . CISA only lists a CVE when it has reliable evidence of exploitation in the wild.

FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 59.4% (scored October 14, 2026).

Catalog snapshot 2026-11-13. Full cross-catalog view: /kev-comparison

CVE-2021-33742 timeline

  1. Published to NVD
  2. Added to CISA KEV+148d

Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON

What to do

CISA required actionApply updates per vendor instructions.

US federal civilian agencies must remediate by (14 days after listing) under BOD 22-01. Everyone else: that deadline is a sensible upper bound, not a target. Vendor guidance and the NVD record are linked under Source above.

CVE / VulnerabilitySeverityCVSSEPSSAdded to KEV
CVE-2026-96951
Microsoft Windows Command Injection Vulnerability
[ HIGH ]8.89.8%
CVE-2026-85880
Microsoft Windows ALPC Heap Buffer Overflow Privilege Escalationwrite-up
[ HIGH ]7.80.4%
CVE-2026-81963
Microsoft Windows Update Stack Link-Following Privilege Escalationwrite-up
[ HIGH ]7.87.1%
CVE-2026-68820
Windows AFD WinSock Use-After-Free Privilege Escalationwrite-up
[ HIGH ]7.08.6%
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
[ CRITICAL ]9.898.8%
CVE-2026-32202
Microsoft Windows Protection Mechanism Failure Vulnerability
[ MEDIUM ]4.371.3%
CVE-2025-60710
Microsoft Windows Link Following Vulnerabilityransomware use
[ HIGH ]7.84.6%
CVE-2023-36424
Microsoft Windows Out-of-Bounds Read Vulnerability
[ HIGH ]7.812.1%
All 172 Microsoft Windows known exploited vulnerabilities →