CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability (CVE-2024-38217) Analysis and Mitigation Guide
[Affected Scope] Windows 10, Windows 11, and Windows Server environments with Smart App Control or Windows Defender SmartScreen enabled
[Impact] Attackers can bypass Mark of the Web (MotW) warnings, allowing malicious files to execute without triggering security prompts to the user
[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict the execution of untrusted container/shortcut files
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability (CVE-2024-38213) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server
[Impact] Attackers can bypass Mark of the Web (MotW) security warnings, leading users to execute malicious files without any security prompts
[Mitigation] Apply the official Microsoft security updates immediately and harden SmartScreen policies
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability Technical Advisory (CVE-2023-36584)
[Affected Scope] All supported versions of Microsoft Windows 10, 11, and Windows Server
[Impact] Attackers can bypass MotW warnings and SmartScreen blocks to execute malicious files without user warnings
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and harden SmartScreen policies
Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] Attackers can bypass Mark of the Web (MotW) warnings and Windows SmartScreen blocks using specially crafted signatures, leading to silent malware execution
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict untrusted file execution using AppLocker/WDAC policies
Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2022-44698) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server 2016, 2019, 2022
[Impact] Attackers can bypass Windows SmartScreen and Mark of the Web (MotW) warnings, leading to unauthorized execution of malicious files without user alerts
[Mitigation] Apply the latest Microsoft Cumulative Updates immediately and enforce strict SmartScreen policies via GPO
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability (CVE-2022-41091) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems, including Windows 10, 11, and Windows Server editions
[Impact] Attackers can bypass the Mark of the Web (MotW) security warning, allowing malicious files to execute without triggering SmartScreen alerts
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict execution of untrusted files
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability (CVE-2022-41049) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Windows operating systems, including Windows 10, 11, and Windows Server editions
[Impact] Files downloaded from the internet may bypass the 'Mark of the Web (MotW)' flag, allowing malicious payloads to execute without SmartScreen warnings or Office Protected View restrictions
[Mitigation] Apply the latest Microsoft Cumulative Updates immediately, and restrict the extraction of untrusted archives (ZIP, ISO) until patched