CVE-2021-40444

Potential CVE-2021-40444 Exploitation Attempt

Aug 12, 2024 · attack.execution attack.t1059 cve.2021-40444 detection.emerging-threats ·

Detects potential exploitation of CVE-2021-40444 via suspicious process patterns seen in in-the-wild exploitations

Potential Exploitation Attempt From Office Application

Aug 12, 2024 · attack.execution attack.defense-evasion cve.2021-40444 detection.emerging-threats ·

Detects Office applications executing a child process that includes directory traversal patterns. This could be an attempt to exploit CVE-2022-30190 (MSDT RCE) or CVE-2021-40444 (MSHTML RCE)

Suspicious Word Cab File Write CVE-2021-40444

Aug 12, 2024 · attack.resource-development attack.t1587 detection.emerging-threats ·

Share on:

Detects file creation patterns noticeable during the exploitation of CVE-2021-40444