Cyber Resilience

CVE-2024-30040

HighCISA KEVActive ExploitationEUVD Exploited

Published: 14 May 2024

Published
14 May 2024
Modified
28 October 2025
KEV Added
14 May 2024
Patch
CVSS Score v3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.2866 96.6th percentile
Risk Priority 55 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-30040 is a high-severity Improper Input Validation (CWE-20) vulnerability in Microsoft Windows 10 1809. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 3.4% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-3 (Malicious Code Protection).

Deeper analysis

CVE-2024-30040 is a security feature bypass vulnerability affecting the Windows MSHTML platform. It carries a CVSS 3.1 base score of 8.8 with the vector string AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H and is associated with CWE-20.

An attacker can exploit the flaw over the network without authentication or special privileges, provided the victim performs a required user interaction such as visiting a crafted web page. Successful exploitation can result in a complete compromise of confidentiality, integrity, and availability on the affected system.

Microsoft has issued remediation guidance through its security update guide, and the vulnerability appears in CISA’s catalog of known exploited vulnerabilities.

The associated EPSS score stands at 0.2866 with no material change from its recorded peak, while listing in the CISA catalog confirms observed real-world exploitation activity.

EU & UK References

Vulnerability details

Windows MSHTML Platform Security Feature Bypass Vulnerability

CWE(s)
KEV Date Added
14 May 2024

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

microsoft
windows 10 1507
≤ 10.0.10240.20651
microsoft
windows 10 1607
≤ 10.0.14393.6981 · ≤ 10.0.14393.6981
microsoft
windows 10 1809
≤ 10.0.17763.5820 · ≤ 10.0.17763.5820 · ≤ 10.0.17763.5820
microsoft
windows 10 21h2
≤ 10.0.19044.4412
microsoft
windows 10 22h2
≤ 10.0.19045.4412
microsoft
windows 11 21h2
≤ 10.0.22000.2960
microsoft
windows 11 22h2
≤ 10.0.22621.3593
microsoft
windows 11 23h2
≤ 10.0.22631.3593
microsoft
windows server 2016
≤ 10.0.14393.6981
microsoft
windows server 2019
≤ 10.0.17763.5820
+2 more product configuration(s) — see NVD for full list

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly counters the CWE-20 improper input validation root cause that enables the MSHTML security feature bypass.

preventdetect

Blocks or detects malicious HTML/rendering payloads that exploit the MSHTML bypass over the network.

prevent

Enforces information flow rules that can restrict the unauthorized actions resulting from a successful MSHTML bypass.

References