LetsDefend - MSHTML
Julian X. — Cyber Security Analyst
MSHTML better known as Trident, is the web rendering engine used by Microsoft’s classic web browsers. It is the technology behind Internet Explorer, older versions of Outlook, Microsoft Office, and many other legacy Windows features.
Historically, MSHTML (Trident) has been one of the most attacked and exploited components in the Windows ecosystem, and for a good reason: its attack surface is huge, a single MSHTML vulnerability can be triggered through everyday apps like Microsoft Word, Excel, Outlook, Skype, and several other third-party applications. Attackers love it because MSHTML can process old HTML, deprecated JavaScript APIs, CSS, iframes, legacy ActiveX controls, and even local file access in certain contexts. https://jjeuribe.github.io/posts/letsdefend-mshtml/
1 reactions · 0 comments