The vulnerability of the SmartScreen security component, which prevents unauthorized access and malicious programs from being executed on Windows operating systems, allows attackers to circumvent security restrictions.

🗓️ 16 Dec 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 14 Views

Windows SmartScreen flaw lets remote attackers bypass security by downloading malware via phishing.

Reporter	Title	Published	Views	Family All 41
ATTACKERKB	CVE-2022-44698	13 Dec 202200:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday December 2022: SPNEGO RCE, Mark of the Web Bypass, Edge Memory Corruptions	24 Dec 202222:55	–	avleonov
Circl	CVE-2022-44698	13 Dec 202221:41	–	circl
CISA KEV Catalog	Microsoft Defender SmartScreen Security Feature Bypass Vulnerability	13 Dec 202200:00	–	cisa_kev
CNNVD	Microsoft Windows SmartScreen 安全漏洞	13 Dec 202200:00	–	cnnvd
CVE	CVE-2022-44698	13 Dec 202200:00	–	cve
Cvelist	CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability	13 Dec 202200:00	–	cvelist
hivepro	Microsoft addresses actively exploited zero-day and numerous critical flaws	15 Dec 202211:42	–	hivepro
hivepro	Citrix ADC and Gateway Zero-Day Vulnerability Exploited by APT5	15 Dec 202213:53	–	hivepro
Microsoft KB	December 13, 2022—KB5021233 (OS Builds 19042.2364, 19043.2364, 19044.2364, and 19045.2364)	13 Dec 202208:00	–	mskb

Source	Link
tenable	www.tenable.com/blog/microsofts-december-2022-patch-tuesday-addresses-48-cves-cve-2022-44698
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-44698
msrc	www.msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-44698
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 35.4

CVSS 26.4

EPSS0.76267

SmartScreen vulnerability Windows security phishing remote attacker malware download security settings errors