Product
MSHTML Framework
- First Reported
- Mar 2, 2026
- Latest Reported
- Apr 1, 2026
Reported Context (2)
- Pawn Storm has been observed exploiting a critical Windows zero-day (CVE-2026-21513) in the MSHTML Framework alongside a security feature bypass in Microsoft Office (CVE-2026-21509). Trend Micro Reports Pawn Storm PRISMEX Campaign Targeting NATO Logistics
- The vulnerability in question is CVE-2026-21513 (CVSS score: 8.8), a high-severity security feature bypass affecting the MSHTML Framework. Akamai Links APT28 Activity to Exploitation of Patched MSHTML Zero-Day
CVE (2)
Malware (5)
People (1)
Threat Actors (2)
MITRE ATT&CK (5)
Vendors (1)
Products (3)
Industries (1)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.