Microsoft update

KB5026366

IE Cumulative

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.1.0.0
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.1.0.0
Windows Server 2008 for 32-bit Systems Service Pack 2 1.1.0.0
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.1.0.0
Windows Server 2008 for x64-based Systems Service Pack 2 1.1.0.0
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1.1.0.0
Windows Server 2012 1.1.0.0
Windows Server 2012 (Server Core installation) 1.1.0.0
Windows Server 2012 R2 1.1.0.0
Windows Server 2012 R2 (Server Core installation) 1.1.0.0

TI-2023-13720 CVE-2023-29324 · GHSA-xmv9-mx7p-4jr3

LOW 34

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.02842 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-73