{"uuid": "3ff21af1-9b30-4065-8397-57acd3c1d920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-21513", "type": "exploited", "source": "https://t.me/thehackernews/8511", "content": "\ud83d\uded1 Microsoft fixed CVE-2026-21513 (CVSS 8.8) in February after confirming zero-day exploitation in MSHTML.\n\nA flaw in ieframe.dll let attackers bypass Mark-of-the-Web and IE ESC, enabling potential code execution. \n\nAkamai linked a malicious LNK sample to infrastructure associated with APT28.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/03/apt28-tied-to-cve-2026-21513-mshtml-0.html", "creation_timestamp": "2026-03-02T10:44:01.000000Z"}