EXPLOIT/ALERT Back to feed

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.

Published 22 Sep 2026Updated 22 Sep 2026106 sources
CVSS 0.0 PoC CANDIDATE△ CISA KEV
Overview Sources History

What happened

Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.

Affected versions

MSHTML: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
PoC-in-GitHub · ozergoker/CVE-2021-40444Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444★ 18ozergoker2021-09-08CandidatePoC-in-GitHub · DarkSprings/CVE-2021-40444CVE-2021-40444 POC★ 9DarkSprings2021-09-09CandidatePoC-in-GitHub · rfcxv/CVE-2021-40444-POC★ 18rfcxv2021-09-09CandidatePoC-in-GitHub · bambooqj/CVE-2021-40444_EXP_JS根据已知样本反编译代码★ 3bambooqj2021-09-09CandidatePoC-in-GitHub · Immersive-Labs-Sec/cve-2021-40444-analysis★ 0Immersive-Labs-Sec2021-09-09CandidatePoC-in-GitHub · vysecurity/CVE-2021-40444★ 3vysecurity2021-09-09CandidatePoC-in-GitHub · k4k4/CVE-2021-40444-SampleCVE-2021-40444 Sample★ 3k4k42021-09-10CandidatePoC-in-GitHub · lockedbyte/CVE-2021-40444CVE-2021-40444 PoC★ 1847lockedbyte2021-09-10CandidatePoC-in-GitHub · fengjixuchui/CVE-2021-40444-docx-Generate★ 5fengjixuchui2021-09-11CandidatePoC-in-GitHub · KnoooW/CVE-2021-40444-docx-Generate★ 0KnoooW2021-09-11CandidatePoC-in-GitHub · mansk1es/CaboomA malicious .cab creation tool for CVE-2021-40444★ 11mansk1es2021-09-11CandidatePoC-in-GitHub · jamesrep/cve-2021-40444Reverse engineering the "A Letter Before Court 4.docx" malicious files exploting cve-2021-40444★ 0jamesrep2021-09-12CandidatePoC-in-GitHub · W1kyri3/Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx★ 0W1kyri32021-09-12CandidatePoC-in-GitHub · aslitsecurity/CVE-2021-40444_buildersThis repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit★ 175aslitsecurity2021-09-12CandidatePoC-in-GitHub · Jeromeyoung/MSHTMHellMalicious document builder for CVE-2021-40444★ 0Jeromeyoung2021-09-14CandidatePoC-in-GitHub · k8gege/CVE-2021-40444★ 21k8gege2021-09-14CandidatePoC-in-GitHub · klezVirus/CVE-2021-40444CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit★ 836klezVirus2021-09-15CandidatePoC-in-GitHub · Edubr2020/CVE-2021-40444--CABlessModified code so that we don´t need to rely on CAB archives★ 105Edubr20202021-09-19CandidatePoC-in-GitHub · kal1gh0st/CVE-2021-40444_CAB_archivesCVE 2021 40444 Windows Exploit services.dll★ 0kal1gh0st2021-09-24CandidatePoC-in-GitHub · LazarusReborn/Docx-Exploit-2021This docx exploit uses res files inside Microsoft .docx file to execute malicious files. This exploit is related to CVE-2021-40444★ 5LazarusReborn2021-09-29CandidatePoC-in-GitHub · H0j3n/CVE-2021-40444★ 10H0j3n2021-10-03CandidatePoC-in-GitHub · metehangenel/MSHTML-CVE-2021-40444★ 0metehangenel2021-10-15CandidatePoC-in-GitHub · Jeromeyoung/TIC4301_ProjectTIC4301 Project - CVE-2021-40444★ 0Jeromeyoung2021-10-16CandidatePoC-in-GitHub · tiagob0b/CVE-2021-40444★ 0tiagob0b2021-10-24CandidatePoC-in-GitHub · kagura-maru/CVE-2021-40444-POCAn attempt to reproduce Microsoft MSHTML Remote Code Execution (RCE) Vulnerability and using Metasploit Framework.★ 10kagura-maru2021-10-28CandidatePoC-in-GitHub · Zeop-CyberSec/word_mshtmlContains the offensive (exploit and auxiliary) modules for the CVE-2021-40444.★ 1Zeop-CyberSec2021-11-08CandidatePoC-in-GitHub · Alexcot25051999/CVE-2021-40444★ 0Alexcot250519992021-11-22CandidatePoC-in-GitHub · lisinan988/CVE-2021-40444-exp★ 0lisinan9882021-11-25CandidatePoC-in-GitHub · 34zY/Microsoft-Office-Word-MSHTML-Remote-Code-Execution-ExploitCVE-2021-40444★ 6534zY2021-12-19CandidatePoC-in-GitHub · MRacumen/CVE-2021-40444Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit★ 2MRacumen2021-12-28CandidatePoC-in-GitHub · nvchungkma/CVE-2021-40444-Microsoft-Office-Word-Remote-Code-Execution-★ 0nvchungkma2022-08-24CandidatePoC-in-GitHub · hqdat809/CVE-2021-40444★ 0hqdat8092023-06-05CandidatePoC-in-GitHub · basim-ahmad/Follina-CVE-and-CVE-2021-40444This repository contains scripts and resources for exploiting the Follina CVE and CVE-2021-40444 vulnerabilities in Microsoft Office. The scripts generate malicious document files that can execute arbitrary code on the target system.★ 0basim-ahmad2024-07-28CandidatePoC-in-GitHub · rankthree/SOC-Detection-T1003.001-CVE-2021-40444★ 0rankthree2026-09-23Candidate
CorrectionsReport an issue