Lucene search
+L

318 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/14 12:00 a.m.•2 views

CVE-2023-24880: Incorrect Authorization

Windows SmartScreen Security Feature Bypass Vulnerability...

4.4CVSS8.3AI score0.78005EPSS
SaveExploits0References2
CISA KEV Catalog
CISA KEV Catalog
•added 2023/03/14 12:00 a.m.•113 views

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web MOTW defenses via a specially crafted malicious file...

4.4CVSS6.6AI score0.78005EPSS
SaveIn wildExploits0
CNNVD
CNNVD
•added 2023/03/14 12:00 a.m.•25 views

Microsoft Defender SmartScreen security vulnerabilities

Microsoft Defender SmartScreen is an anti-phishing and anti-malware support from Microsoft Corporation USA. A security vulnerability exists in Microsoft Defender SmartScreen. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based Systems,Windows 11 Version 22H2...

4.4CVSS7.3AI score0.78005EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/14 12:00 a.m.•18 views

PT-2023-1686 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in Microsoft Windows SmartScreen. This vulnerability can be exploited by an attacker to bypass security restriction...

6.4CVSS6.8AI score0.78005EPSS
SaveExploits0References31
attackerkb
attackerkb
•added 2023/03/14 12:00 a.m.•63 views

CVE-2023-24880

Windows SmartScreen Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

4.4CVSS7AI score0.78005EPSS
SaveIn wildExploits0References3
VulnCheck KEV
VulnCheck KEV
•added 2023/03/14 12:00 a.m.•30 views

VulnCheck KEV: CVE-2023-24880

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web MOTW defenses via a specially crafted malicious file...

4.4CVSS6.9AI score0.78005EPSS
SaveIn wildExploits0References12
Kaspersky
Kaspersky
•added 2023/03/14 12:00 a.m.•418 views

KLA48553 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...

9.8CVSS9.9AI score0.0795EPSS
SaveExploits1References67
SUSE CVE
SUSE CVE
•added 2023/02/15 4:31 a.m.•17 views

SUSE CVE-2018-5174

In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEEMASKFLAGNOUI" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt the user for a decision, and i...

7.5CVSS8.8AI score0.01809EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
•added 2022/12/16 12:00 a.m.•26 views

SmartScreen Security Component Bypass

The vulnerability of the SmartScreen security component against phishing and malicious programs in Windows operating systems is related to errors in security settings. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions by downloading specially created malwa...

6.4CVSS7.1AI score0.76267EPSS
SaveExploits0References5
Krebs on Security
Krebs on Security
•added 2022/12/14 5:01 p.m.•79 views

Microsoft Patch Tuesday, December 2022 Edition

Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The most pressing patches include a zero-day in a Windows feature that tries to flag malicious files from the Web,...

0.3AI score0.76267EPSS
SaveExploits4
Malwarebytes
Malwarebytes
•added 2022/12/14 3:00 p.m.•74 views

Update now! Two zero-days fixed in 2022's last patch Tuesday

In numbers, the patch Tuesday of December 2022 is a relatively light one for Windows users. Microsoft patched 48 vulnerabilities with only six considered critical. But numbers are only half the story. Two of the updates are zero-days with one of them known to be actively exploited. Windows...

8.7AI score0.76267EPSS
SaveExploits4
Rapid7 Blog
Rapid7 Blog
•added 2022/12/13 9:24 p.m.•170 views

Patch Tuesday - December 2022

As far as Patch Tuesdays go, defenders have a relatively light month to close out the year with only 48 CVEs being published by Microsoft today. This does not include the 24 previously disclosed vulnerabilities affecting their Chromium-based Edge browser. There are two zero-days in the mix today...

7.2AI score0.82081EPSS
SaveExploits7
osv_cve
osv_cve
•added 2022/12/13 7:15 p.m.•10 views

CVE-2022-44698

Windows SmartScreen Security Feature Bypass Vulnerability...

5.4CVSS5.8AI score0.76267EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/13 7:15 p.m.•33 views

CVE-2022-44698

Windows SmartScreen Security Feature Bypass Vulnerability...

5.4CVSS0.76267EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/13 7:15 p.m.•36 views

Security feature bypass

Windows SmartScreen Security Feature Bypass Vulnerability...

5.8CVSS5.8AI score0.76267EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2022/12/13 8:00 a.m.•81 views

Windows SmartScreen Security Feature Bypass Vulnerability

...

5.4CVSS7.1AI score0.76267EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2022/12/13 12:00 a.m.•33 views

CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability

...

5.4CVSS5.7AI score0.76267EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/13 12:00 a.m.•4 views

CVE-2022-44698: Undefined Security Weakness

Windows SmartScreen Security Feature Bypass Vulnerability...

5.4CVSS8.3AI score0.76267EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•3 views

PT-2022-5868

Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description The issue is related to errors in security settings of the Windows SmartScreen component, which is responsible for protection against phishing and malicious software. Exploitation...

6.4CVSS0.76267EPSS
SaveExploits0References27
CVE
CVE
•added 2022/12/13 12:00 a.m.•840 views

CVE-2022-44698

CVE-2022-44698 is a Windows SmartScreen security feature bypass that enables bypass of Mark-of-the-Web protections via specially crafted files. The public data confirms exploitation in the wild and active exploitation historically cited by multiple sources (CISA KEV, KrebsOnSecurity). The underly...

5.4CVSS6.8AI score0.76267EPSS
SaveIn wildExploits0References2Affected Software10
Rows per page
Query Builder