CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows SmartScreen Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2024-29988) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server utilizing Microsoft Defender SmartScreen
[Impact] Attackers can bypass Mark-of-the-Web (MotW) warnings and SmartScreen prompts entirely, leading to arbitrary code execution when a user opens a crafted malicious file
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict the execution of unverified downloaded files via Group Policy
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-21412) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server
[Impact] Attackers can bypass Windows Defender SmartScreen warnings using crafted Internet Shortcut (.url) files to execute arbitrary code
[Mitigation] Apply the official Microsoft security updates immediately and restrict outbound SMB/WebDAV traffic
Windows SmartScreen Security Feature Bypass and Code Execution Vulnerability (CVE-2024-21351) Analysis & Mitigation Guide
[Affected Scope] Microsoft Windows 10, 11, and Windows Server 2016, 2019, 2022 with SmartScreen enabled
[Impact] Attackers can bypass SmartScreen warnings and Mark-of-the-Web (MotW) protections to execute arbitrary code on the victim's system without user consent
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and enforce strict Group Policies (GPO) to restrict untrusted file execution
Windows SmartScreen Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2023-36025) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] Attackers can completely bypass Windows SmartScreen warnings and Mark of the Web (MotW) protections via crafted internet shortcut (.url) files, leading to silent malicious code execution
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of untrusted .url and .lnk files from external sources
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability Technical Advisory (CVE-2023-36584)
[Affected Scope] All supported versions of Microsoft Windows 10, 11, and Windows Server
[Impact] Attackers can bypass MotW warnings and SmartScreen blocks to execute malicious files without user warnings
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and harden SmartScreen policies