Tag: CVE-2026-21513

2 Attack Reports | 1 Vulnerabilities

Attack reports

Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

The Russian-aligned cyber espionage group Pawn Storm has launched a new campaign using the PRISMEX malware suite to target Ukrainian defense and Western military aid infrastructure. The campaign exploits vulnerabilities CVE-2026-21509 and CVE-2026-21513, using advanced steganography, COM hijacking,…
apt28
supply chain
ukraine
steganography
nato
critical infrastructure
notdoor
CVE-2026-21509
minidoor
CVE-2026-21513
2026-03-26
prismex
prismexdrop
prismexloader
prismexstager
Published: March 26, 2026
Downloadable IOCs: 84

Inside the Fix: Analysis of In-the-Wild Exploit of CVE-2026-21513

This analysis examines CVE-2026-21513, a security bypass vulnerability in Microsoft's MSHTML framework, patched in February 2026. The flaw, actively exploited by Russian state-sponsored actor APT28, affects all Windows versions and has a CVSS score of 8.8. Using PatchDiff-AI, researchers identified…
exploit
windows
zero-day
CVE-2026-21513
2026-02-25
ieframe.dll
mshtml
patchdiff-ai
shellexecuteexw
Published: February 25, 2026
Linked vulnerabilities : CVE-2026-21513 (CVSS 8.8)
Downloadable IOCs: 1
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-21513

8.8
    Microsoft
  • Mshtml Framework
Published: February 10, 2026
Click here to see more Vulnerabilities