CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows SmartScreen Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2024-29988) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server utilizing Microsoft Defender SmartScreen
[Impact] Attackers can bypass Mark-of-the-Web (MotW) warnings and SmartScreen prompts entirely, leading to arbitrary code execution when a user opens a crafted malicious file
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict the execution of unverified downloaded files via Group Policy
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-21412) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server
[Impact] Attackers can bypass Windows Defender SmartScreen warnings using crafted Internet Shortcut (.url) files to execute arbitrary code
[Mitigation] Apply the official Microsoft security updates immediately and restrict outbound SMB/WebDAV traffic
Windows SmartScreen Security Feature Bypass and Code Execution Vulnerability (CVE-2024-21351) Analysis & Mitigation Guide
[Affected Scope] Microsoft Windows 10, 11, and Windows Server 2016, 2019, 2022 with SmartScreen enabled
[Impact] Attackers can bypass SmartScreen warnings and Mark-of-the-Web (MotW) protections to execute arbitrary code on the victim's system without user consent
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and enforce strict Group Policies (GPO) to restrict untrusted file execution
Windows SmartScreen Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2023-36025) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] Attackers can completely bypass Windows SmartScreen warnings and Mark of the Web (MotW) protections via crafted internet shortcut (.url) files, leading to silent malicious code execution
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of untrusted .url and .lnk files from external sources
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability Technical Advisory (CVE-2023-36584)
[Affected Scope] All supported versions of Microsoft Windows 10, 11, and Windows Server
[Impact] Attackers can bypass MotW warnings and SmartScreen blocks to execute malicious files without user warnings
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and harden SmartScreen policies
Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-32049) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows Operating Systems, including Windows 10, Windows 11, and Windows Server
[Impact] Attackers can bypass the Windows SmartScreen warning dialog when executing downloaded malicious files, leading to immediate code execution without user consent
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict execution of untrusted files
Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] Attackers can bypass Mark of the Web (MotW) warnings and Windows SmartScreen blocks using specially crafted signatures, leading to silent malware execution
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict untrusted file execution using AppLocker/WDAC policies
Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2022-44698) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server 2016, 2019, 2022
[Impact] Attackers can bypass Windows SmartScreen and Mark of the Web (MotW) warnings, leading to unauthorized execution of malicious files without user alerts
[Mitigation] Apply the latest Microsoft Cumulative Updates immediately and enforce strict SmartScreen policies via GPO