CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–3 of 3 advisories (Page 1/1)

CVE-2024-382175.4/MEDIUMEPSS 10.0%CISA KEV

2024-09-10

Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability (CVE-2024-38217) Analysis and Mitigation Guide

[Affected Scope] Windows 10, Windows 11, and Windows Server environments with Smart App Control or Windows Defender SmartScreen enabled

[Impact] Attackers can bypass Mark of the Web (MotW) warnings, allowing malicious files to execute without triggering security prompts to the user

[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict the execution of untrusted container/shortcut files

CVE-2024-382136.5/MEDIUMEPSS 13.6%CISA KEV

2024-08-13

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server

[Impact] Attackers can bypass Mark of the Web (MotW) security warnings, leading users to execute malicious files without any security prompts

[Mitigation] Apply the official Microsoft security updates immediately and harden SmartScreen policies

CVE-2023-365845.4/MEDIUMEPSS 3.3%CISA KEV

2023-10-10

[Affected Scope] All supported versions of Microsoft Windows 10, 11, and Windows Server

[Impact] Attackers can bypass MotW warnings and SmartScreen blocks to execute malicious files without user warnings

[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and harden SmartScreen policies