Lucene search
CISACISA-KEV-CVE-2024-29988HistoryApr 30, 2024 - 12:00 a.m.
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
2024-04-3000:00:00
CISA
www.cisa.gov
187
microsoft smartscreen
security feature bypass
mark of the web
motw
cve-2023-38831
cve-2024-21412
execute malicious file
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.312
Percentile
97.1%
Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.
Related
githubexploit
githubexploit
Exploit for Protection Mechanism Failure in Microsoft
2024-05-03 12:17:25
Exploit for Protection Mechanism Failure in Microsoft
2024-03-21 15:57:51
Exploit for Protection Mechanism Failure in Microsoft
2024-03-21 15:57:51
thn
thn
Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers
2024-07-24 06:15:00
DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability
2024-02-14 07:33:00
Google TAG Detects State-Backed Threat Actors Exploiting WinRAR Flaw
2023-10-19 04:02:00
attackerkb
attackerkb
trendmicroblog
trendmicroblog
nvd
nvd
hackread
hackread
Windows SmartScreen Flaw Enabling Data Theft in Major Stealer Attack
2024-07-24 10:59:51
prion
prion
Security feature bypass
2024-02-13 18:15:00
Design/Logic Flaw
2023-08-23 17:15:00
zdi
zdi
Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability
2024-02-13 00:00:00
Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability
2024-04-09 00:00:00
vulnrichment
vulnrichment
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
2024-02-13 18:02:49
CVE-2024-29988 SmartScreen Prompt Security Feature Bypass Vulnerability
2024-04-09 17:00:35
CVE-2023-38831
2023-08-23 00:00:00
hivepro
hivepro
Water Hydra Exploits CVE-2024-21412 to Target Financial Traders
2024-02-19 05:35:43
Attacks, Vulnerabilities and Actors 12 to 18 February 2024
2024-02-20 11:51:51
The Rise of DarkCasino APT Group Exploiting WinRAR 0-Day
2023-11-27 12:47:11
cvelist
cvelist
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
2024-02-13 18:02:49
CVE-2024-29988 SmartScreen Prompt Security Feature Bypass Vulnerability
2024-04-09 17:00:35
CVE-2023-38831
2023-08-23 00:00:00
mscve
mscve
Internet Shortcut Files Security Feature Bypass Vulnerability
2024-02-13 08:00:00
SmartScreen Prompt Security Feature Bypass Vulnerability
2024-04-09 07:00:00
cisa_kev
cisa_kev
RARLAB WinRAR Code Execution Vulnerability
2023-08-24 00:00:00
cve
cve
packetstorm
packetstorm
WinRAR Remote Code Execution
2023-09-08 00:00:00
WinRAR 6.22 Remote Code Execution
2024-03-28 00:00:00
zdt
zdt
WinRAR version 6.22 - Remote Code Execution via ZIP archive Exploit
2024-03-29 00:00:00
WinRAR Remote Code Execution Exploit
2023-09-11 00:00:00
openvas
openvas
RARLabs WinRAR Code Execution Vulnerability - Windows
2023-08-31 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5034763)
2024-02-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5034768)
2024-02-14 00:00:00
securelist
securelist
Head Mare: adventures of a unicorn in Russia and Belarus
2024-09-02 10:00:22
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03
exploitdb
exploitdb
WinRAR version 6.22 - Remote Code Execution via ZIP archive
2024-03-28 00:00:00
debiancve
debiancve
CVE-2023-38831
2023-08-23 17:15:00
metasploit
metasploit
WinRAR CVE-2023-38831 Exploit
2023-09-04 16:56:22
krebs
krebs
April’s Patch Tuesday Brings Record Number of Fixes
2024-04-09 20:28:17
Fat Patch Tuesday, February 2024 Edition
2024-02-13 22:28:48
cnvd
cnvd
WinRAR Code Execution Vulnerability
2023-08-25 00:00:00
trellix
trellix
CVE-2023-38831: Navigating the Threat Landscape of the Latest Security Vulnerability
2023-11-09 00:00:00
CVE-2023-38831: Navigating the Threat Landscape of the Latest Security Vulnerability
2023-11-09 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
malwarebytes
malwarebytes
kaspersky
kaspersky
KLA52366 Multiple vulnerabilities in WinRAR
2023-08-17 00:00:00
KLA63958 Multiple vulnerabilities in Microsoft Windows
2024-02-13 00:00:00
KLA65511 Multiple vulnerabilities in Microsoft Windows
2024-04-09 00:00:00
nessus
nessus
WinRAR < 6.23 RCE
2023-08-24 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-09-15 18:54:45
Patch Tuesday - February 2024
2024-02-13 21:26:21
Patch Tuesday - April 2024
2024-04-09 20:28:17
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, February 2024 Security Update Review
2024-02-13 20:03:29
2024 Midyear Threat Landscape Review
2024-08-06 13:00:00
Microsoft and Adobe Patch Tuesday, April 2024 Security Update Review
2024-04-09 19:23:40
avleonov
avleonov
mskb
mskb
February 13, 2024—KB5034768 (OS Build 17763.5458)
2024-02-13 08:00:00
February 13, 2024—KB5034763 (OS Builds 19044.4046 and 19045.4046)
2024-02-13 08:00:00
February 13, 2024—KB5034765 (OS Builds 22621.3155 and 22631.3155)
2024-02-13 08:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.312
Percentile
97.1%
Related for CISA-KEV-CVE-2024-29988