What is the fix for CVE-2024-30040?

Apply the Microsoft update for CVE-2024-30040 or the vendor mitigations; the sources do not name the patch or build.

Live › vulnerability › CVE-2024-30040

high8.8Exploited in the wildInfrastructure

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows MSHTML Platform has a security feature bypass flaw that CISA lists as actively exploited. The sources do not say what the attacker bypasses or how the exploit is delivered.

Summary written from the sources below. Check the originals before acting.

CVSS 3.x

8.8

high

scored by [email protected]

known so far4 of 6

missing: how to check, primary source

First public: May 14, 2024 UTC
Last modified: Jun 17, 2026
Status: open
Known exploitation: Listed in CISA KEV
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: Yes, on CISA KEV since May 14, 2024.
Needs login: Not known from the sources.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Unknown; sources say only a security feature bypass, exploited in the wild.
CVSS said: 8.8. The facts above agree.

Known exploitation

CISA KEV

Know the next one before it finds you.

Add to Slack

Live › vulnerability › CVE-2024-30040

Go to dashboard

high8.8Exploited in the wildInfrastructure

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows MSHTML Platform has a security feature bypass flaw that CISA lists as actively exploited. The sources do not say what the attacker bypasses or how the exploit is delivered.

Summary written from the sources below. Check the originals before acting.

CVSS 3.x

8.8

high

scored by [email protected]

known so far4 of 6

missing: how to check, primary source

First public: May 14, 2024 UTC
Last modified: Jun 17, 2026
Status: open
Known exploitation: Listed in CISA KEV
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: Yes, on CISA KEV since May 14, 2024.
Needs login: Not known from the sources.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Unknown; sources say only a security feature bypass, exploited in the wild.
CVSS said: 8.8. The facts above agree.

Known exploitation

CISA KEV

Know the next one before it finds you.

Add to Slack

Product	Ecosystem	Affected	Fixed in
Microsoft Windows	vendor	–	–
microsoft windows 10 1507	vendor	< 10.0.10240.20651	10.0.10240.20651
microsoft windows 10 1607	vendor	< 10.0.14393.6981	10.0.14393.6981
microsoft windows 10 1809	vendor	< 10.0.17763.5820	10.0.17763.5820
microsoft windows 10 21h2	vendor	< 10.0.19044.4412	10.0.19044.4412
microsoft windows 10 22h2	vendor	< 10.0.19045.4412	10.0.19045.4412
microsoft windows 11 21h2	vendor	< 10.0.22000.2960	10.0.22000.2960
microsoft windows 11 22h2	vendor	< 10.0.22621.3593	10.0.22621.3593
microsoft windows 11 23h2	vendor	< 10.0.22631.3593	10.0.22631.3593
microsoft windows server 2016	vendor	< 10.0.14393.6981	10.0.14393.6981
microsoft windows server 2019	vendor	< 10.0.17763.5820	10.0.17763.5820
microsoft windows server 2022	vendor	< 10.0.20348.2458	10.0.20348.2458
microsoft windows server 2022 23h2	vendor	< 10.0.25398.887	10.0.25398.887

Windows MSHTML Platform Security Feature Bypass Vulnerability

Why it is high, and not just CVSS

Known exploitation

Know the next one before it finds you.

Windows MSHTML Platform Security Feature Bypass Vulnerability

Why it is high, and not just CVSS

Known exploitation

Know the next one before it finds you.

Who is affected

How to check

The fix

Who had it, and when

What the sources say, verbatim

Sources