Microsoft warns that a recently patched Windows flaw, tracked as CVE-2024-43461, was actively exploited as a zero-day before July 2024.The vulnerability CVE-2024-43461 is a Windows MSHTML platform spoofing issue, impacting all supported Windows versions.The ZDI Threat Hunting team discovered a new exploit similar to a previously patched July vulnerability tracked as CVE-2024-38112.Patch Tuesday security updates for September 2024 addressed the CVE-2024-43461 vulnerability.