Attackers are exploiting CVE-2021-40444, a zero-day remote code execution vulnerability in MSHTML (the main HTML component of the Internet Explorer browser), to compromise Windows/Office users in “a limited number of targeted attacks,” Microsoft has warned on Tuesday.

Källa: Attackers are exploiting zero-day RCE flaw to target Windows users (CVE-2021-40444) – Help Net Security