CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-11-09
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability (CVE-2022-41049) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Windows operating systems, including Windows 10, 11, and Windows Server editions
[Impact] Files downloaded from the internet may bypass the 'Mark of the Web (MotW)' flag, allowing malicious payloads to execute without SmartScreen warnings or Office Protected View restrictions
[Mitigation] Apply the latest Microsoft Cumulative Updates immediately, and restrict the extraction of untrusted archives (ZIP, ISO) until patched