Findings

CVE-2023-32046

Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

Published Jul 11, 2023 · updated Jun 16, 2026 · microsoft windows 10 1507

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 11, 2023 · Catalog

    Detected

    Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

  2. Jul 11, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  3. Aug 1, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

CISA due date Aug 1, 2023

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 21h2version unspecified
  • cpe microsoft/windows 10 22h2version unspecified
  • cpe microsoft/windows 11 21h2version unspecified
  • cpe microsoft/windows 11 22h2version unspecified
  • cpe microsoft/windows server 2008version unspecified
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2023-32046

    Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

    cisa.gov
  • CVE.orgCVE-2023-32046

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-32046

    30-day exploitation probability 10.0%

    first.org
  • NIST NVDCVE-2023-32046

    Windows MSHTML Platform Elevation of Privilege Vulnerability

    nvd.nist.gov

References