CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2024-382175.4/MEDIUMEPSS 10.0%CISA KEV
2024-09-10

Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability (CVE-2024-38217) Analysis and Mitigation Guide

[Affected Scope] Windows 10, Windows 11, and Windows Server environments with Smart App Control or Windows Defender SmartScreen enabled

[Impact] Attackers can bypass Mark of the Web (MotW) warnings, allowing malicious files to execute without triggering security prompts to the user

[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict the execution of untrusted container/shortcut files

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse