CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2023-248804.4/MEDIUMEPSS 78.1%CISA KEV
2023-03-14

Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880) Analysis & Mitigation Guide

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server

[Impact] Attackers can bypass Mark of the Web (MotW) warnings and Windows SmartScreen blocks using specially crafted signatures, leading to silent malware execution

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict untrusted file execution using AppLocker/WDAC policies

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse