- Vendor / Project
- Microsoft
- Product
- Edge and Internet Explorer
- Date added
- Mar 28, 2022
- Due date
- Apr 18, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-704
Description
Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.
Required action
Apply updates per vendor instructions.