CVE:CVE-2021-40444
CNNVD:CNNVD-202109-350
Microsoft MSHTML.DLL是美国微软（Microsoft）公司的一个用于解析HTML语言的动态链接库，IE、Outlook、Outlook Express等应用程序都使用了该动态链接库。
Microsoft MSHTML.DLL 存在路径遍历漏洞，远程攻击者可以创建带有恶意ActiveX控件的特制Office文档，诱使受害者打开文档并在系统上执行任意代码。
solution:Upgrade microsoft windows_10 to a higher version than -,20h2,21h1,1607,1809,1909,2004,and avoid the version 20h2,21h1,1607,1809,1909,2004; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8.1 to a higher version than -; Upgrade microsoft windows_rt_8.1 to a higher version than -; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,-:r2,and avoid the version -:r2; Upgrade microsoft windows_server_2016 to a higher version than -,20h2,2004,and avoid the version 20h2,2004; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than -