CVE-2024-38112

CVE-2024-38112 is a critical spoofing vulnerability affecting the Windows MSHTML Platform. With a CVSS score of 7.5 (HIGH), it allows remote attackers to achieve high impact on confidentiality, integrity, and availability through user interaction, despite high attack complexity. This zero-day vulnerability is actively exploited in the wild, notably by Void Banshee to spread malware, and has garnered significant community discussion and media coverage. While no public exploit code is available, its inclusion in CISA's KEV catalog and high EPSS score underscore the urgent need for patching.