CVE Vulnerability Advisory Database

[Affected Scope] All supported versions of Windows OS including Windows 10, 11, and Windows Server.

[Impact] Unauthorized attackers can bypass security features and execute arbitrary commands, leading to full system compromise.

[Mitigation] Apply the latest Microsoft security updates immediately and restrict execution of untrusted URI handlers.

[Affected Scope] Applications and system components utilizing the MSHTML (Trident) engine within Microsoft Windows environments

[Impact] Unauthorized network attackers can bypass critical security boundaries and sandbox protections, potentially leading to remote code execution

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or implement registry-based workarounds to restrict MSHTML rendering

[Affected Scope] Windows Shell component across Microsoft Windows operating systems

[Impact] Unauthorized network attackers can bypass critical security boundaries, potentially leading to arbitrary code execution via user interaction

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict outbound SMB/WebDAV traffic

[Affected Scope] All Microsoft Office suites and local environments processing untrusted document inputs.

[Impact] Attackers can bypass local security decisions, leading to unauthorized macro execution and arbitrary code execution.

[Mitigation] Apply official Microsoft security patches immediately and enforce strict macro blocking policies for untrusted files.

[Affected Scope] Microsoft Management Console (MMC) component across various supported Microsoft Windows operating systems

[Impact] Local attackers can bypass critical security boundaries and Mark-of-the-Web (MotW) protections via user interaction, potentially leading to privilege escalation and arbitrary code execution

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict the execution of untrusted .msc files using AppLocker or WDAC

[Affected Scope] Microsoft Publisher 2016, Office LTSC 2021, and Microsoft 365 Apps within supported lifecycles

[Impact] An attacker can bypass Office macro block policies and Mark of the Web (MOTW) security warnings to execute arbitrary code when a user opens a specially crafted Publisher file

[Mitigation] Apply the official Microsoft security updates immediately and enforce Group Policies to block macros in files originating from the Internet

[Affected Scope] Windows 10, Windows 11, and Windows Server environments with Smart App Control or Windows Defender SmartScreen enabled

[Impact] Attackers can bypass Mark of the Web (MotW) warnings, allowing malicious files to execute without triggering security prompts to the user

[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict the execution of untrusted container/shortcut files

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server

[Impact] Attackers can bypass Mark of the Web (MotW) security warnings, leading users to execute malicious files without any security prompts

[Mitigation] Apply the official Microsoft security updates immediately and harden SmartScreen policies

[Affected Scope] Windows client and server operating systems utilizing the Windows MSHTML platform

[Impact] Attackers can bypass security warnings and protection mechanisms to execute remote code via malicious files loading OLE objects with user interaction

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict execution of untrusted files and email attachments

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server

[Impact] Attackers can bypass Windows Defender SmartScreen warnings using crafted Internet Shortcut (.url) files to execute arbitrary code

[Mitigation] Apply the official Microsoft security updates immediately and restrict outbound SMB/WebDAV traffic

[Affected Scope] Microsoft Windows 10, 11, and Windows Server 2016, 2019, 2022 with SmartScreen enabled

[Impact] Attackers can bypass SmartScreen warnings and Mark-of-the-Web (MotW) protections to execute arbitrary code on the victim's system without user consent

[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and enforce strict Group Policies (GPO) to restrict untrusted file execution

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server

[Impact] Attackers can completely bypass Windows SmartScreen warnings and Mark of the Web (MotW) protections via crafted internet shortcut (.url) files, leading to silent malicious code execution

[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of untrusted .url and .lnk files from external sources

[Affected Scope] All supported versions of Microsoft Windows 10, 11, and Windows Server

[Impact] Attackers can bypass MotW warnings and SmartScreen blocks to execute malicious files without user warnings

[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and harden SmartScreen policies