CVE-2024-38112

Name of the Vulnerable Software and Affected Versions: Microsoft Windows (affected versions not specified)

Description: The vulnerability is related to the MSHTML platform in Microsoft Windows and involves a spoofing issue that allows attackers to affect the system. It has been exploited by threat actors for over a year, with attacks using Internet Explorer shortcut files to lure victims into enabling remote code execution. The vulnerability has been used to distribute the Atlantida InfoStealer malware. Threat actors have been leveraging Internet Explorer in new zero-day spoofing attacks, and the vulnerability has been identified as a critical issue that needs to be patched immediately.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.