Lucene search

K
cisa_kevCISACISA-KEV-CVE-2024-38213
HistoryAug 13, 2024 - 12:00 a.m.

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

2024-08-1300:00:00
CISA
www.cisa.gov
27
microsoft
smartscreen
security feature
vulnerability
bypass
attacker
user experience
malicious file

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

6.7

Confidence

Low

EPSS

0.011

Percentile

85.0%

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

6.7

Confidence

Low

EPSS

0.011

Percentile

85.0%