Microsoft Windows Multiple Vulnerabilities (KB5034766)

This host is missing an important security update according to Microsoft KB5034766 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5034765)

This host is missing an important security update according to Microsoft KB5034765 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Patch Tuesday - February 2024

Microsoft is addressing 73 vulnerabilities this February 2024 Patch Tuesday, including two actually, three! zero-day/exploited-in-the-wild vulnerabilities, both of which are already included on the CISA KEV list. Today also brings patches for two critical remote code execution RCE vulnerabilities...

CVE-2024-21412

Internet Shortcut Files Security Feature Bypass Vulnerability...

CVE-2024-21412

Internet Shortcut Files Security Feature Bypass Vulnerability...

Security feature bypass

Internet Shortcut Files Security Feature Bypass Vulnerability...

CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability

...

CVE-2024-21412

CVE-2024-21412 is a Windows SmartScreen security feature bypass that lets a downloaded file, marked by the Mark of the Web (MoTW), execute without SmartScreen prompts when dealing with Internet Shortcut files. Connected sources cite in-the-wild activity (Water Hydra) and exploitation via spearphi...

CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability

...

Internet Shortcut Files Security Feature Bypass Vulnerability

...

PT-2024-1646

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 affected versions not specified Microsoft Windows 11 affected versions not specified Microsoft Windows Server 2016 through 2022 Description This issue is a security feature bypass related to the handling of Internet Shortc...

Microsoft Windows Security Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Internet Shortcut Files. The following products and editions are affected: Windows 10 Version 21H2 for x64-based Systems,Windows Serve...

VulnCheck KEV: CVE-2024-21412

Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass...

CVE-2024-21412

Internet Shortcut Files Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability

This vulnerability allows remote attackers to bypass the SmartScreen security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass...

New Mispadu Banking Trojan Exploiting Windows SmartScreen Flaw

The threat actors behind the Mispadu banking Trojan have become the latest to exploit a now-patched Windows SmartScreen security bypass flaw to compromise users in Mexico. The attacks entail a new variant of the malware that was first observed in 2019, Palo Alto Networks Unit 42 said in a report...

CVE-2024-23204

CVE-2024-23204 affects macOS Shortcuts (and related OSes) with a root cause of insufficient permissions checks that could allow a shortcut to access sensitive data via certain actions without prompting the user. The issue is fixed in macOS Sonoma 14.3 and across watchOS 10.3, iOS 17.3 and iPadOS ...

January 23, 2024—KB5034203 (OS Build 19045.3996) Preview

None None...

CVE-2024-23203: Undefined Security Weakness

The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.5. A shortcut may be able to use sensitive data with certain actions without prompting the user...