Lucene search
K

252 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2024/08/13 12:0 a.m.54 views

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file...

6.5CVSS6.7AI score0.59323EPSS
In wildExploits1
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.1 views

Microsoft SmartScreen 安全漏洞

Microsoft SmartScreen is a Microsoft-developed security technology designed to help users identify and block potential malware and phishing attacks. A security vulnerability exists in Microsoft SmartScreen. An attacker could exploit the vulnerability to bypass certain features. The following...

8.8CVSS6.2AI score0.06536EPSS
Exploits0References3
The Hacker News
The Hacker News
added 2024/08/05 1:2 p.m.34 views

Researchers Uncover Flaws in Windows Smart App Control and SmartScreen

Cybersecurity researchers have uncovered design weaknesses in Microsoft's Windows Smart App Control and SmartScreen that could enable threat actors to gain initial access to target environments without raising any warnings. Smart App Control SAC is a cloud-powered security feature introduced by...

7.3AI score
Exploits0
HackRead
HackRead
added 2024/07/24 10:59 a.m.37 views

Windows SmartScreen Flaw Enabling Data Theft in Major Stealer Attack

New Stealer Campaign Exploits Windows SmartScreen Vulnerability CVE-2024-21412 - This large-scale attack targets Windows users, stealing passwords, browsing…...

8.1CVSS7.2AI score0.9377EPSS
Exploits2
The Hacker News
The Hacker News
added 2024/07/24 6:15 a.m.62 views

Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers

A now-patched security flaw in the Microsoft Defender SmartScreen has been exploited as part of a new campaign designed to deliver information stealers such as ACR Stealer, Lumma, and Meduza. Fortinet FortiGuard Labs said it detected the stealer campaign targeting Spain, Thailand, and the U.S...

8.1CVSS8.1AI score0.9377EPSS
Exploits2
GithubExploit
GithubExploit
added 2024/05/03 12:17 p.m.686 views

Exploit for Protection Mechanism Failure in Microsoft

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malic...

8.8CVSS9.1AI score0.93865EPSS
Exploits50
CISA
CISA
added 2024/04/30 12:0 p.m.12 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors an...

8.8CVSS7AI score0.62768EPSS
In wildExploits1References6
CISA KEV Catalog
CISA KEV Catalog
added 2024/04/30 12:0 a.m.276 views

Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web MotW feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file...

8.8CVSS7.3AI score0.62768EPSS
In wildExploits1
Malwarebytes
Malwarebytes
added 2024/04/11 8:23 a.m.35 views

Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities

The April 2024 Patch Tuesday update includes patches for 149 Microsoft vulnerabilities and republishes 6 non-Microsoft CVEs. Three of those 149 vulnerabilities are listed as critical, and one is listed as actively exploited by Microsoft. Another vulnerability is claimed to be a zero-day by...

6.8CVSS8.2AI score0.62768EPSS
Exploits1
The Hacker News
The Hacker News
added 2024/04/10 4:57 a.m.73 views

Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included

Microsoft has released security updates for the month of April 2024 to remediate a record 149 flaws, two of which have come under active exploitation in the wild. Of the 149 flaws, three are rated Critical, 142 are rated Important, three are rated Moderate, and one is rated Low in severity. The...

9CVSS9AI score0.9377EPSS
Exploits4
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:0 a.m.1 views

The vulnerability of the SmartScreen security component for preventing phishing and malicious programs in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the SmartScreen security component against phishing and malicious programs in Windows operating systems is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code, provided that the...

10CVSS8.2AI score0.62768EPSS
Exploits1References3
Krebs on Security
Krebs on Security
added 2024/04/09 8:28 p.m.43 views

April’s Patch Tuesday Brings Record Number of Fixes

If only Patch Tuesdays came around infrequently -- like total solar eclipse rare -- instead of just creeping up on us each month like The Man in the Moon. Although to be fair, it would be tough for Microsoft to eclipse the number of vulnerabilities fixed in this months patch batch -- a record 147...

6.8CVSS8AI score0.9377EPSS
Exploits2
OSV
OSV
added 2024/04/09 5:16 p.m.0 views

CVE-2024-29988

SmartScreen Prompt Security Feature Bypass Vulnerability...

8.8CVSS5.8AI score0.62768EPSS
Exploits1References2
NVD
NVD
added 2024/04/09 5:16 p.m.23 views

CVE-2024-29988

SmartScreen Prompt Security Feature Bypass Vulnerability...

8.8CVSS8.6AI score0.62768EPSS
Exploits1References2
CVE
CVE
added 2024/04/09 5:0 p.m.361 views

CVE-2024-29988

CVE-2024-29988 is a Microsoft Windows SmartScreen security feature bypass vulnerability (MotW bypass) that enables arbitrary code execution when a user opens a zip/executable delivered in a crafted file. Public exploit activity exists (GitHub exploit repository) and reports indicate in-the-wild u...

8.8CVSS8.4AI score0.62768EPSS
In wildExploits1References2Affected Software9
Cvelist
Cvelist
added 2024/04/09 5:0 p.m.33 views

CVE-2024-29988 SmartScreen Prompt Security Feature Bypass Vulnerability

...

8.8CVSS8.8AI score0.62768EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/04/09 5:0 p.m.27 views

CVE-2024-29988 SmartScreen Prompt Security Feature Bypass Vulnerability

...

8.8CVSS6.9AI score0.62768EPSS
Exploits1References1
Microsoft CVE
Microsoft CVE
added 2024/04/09 7:0 a.m.37 views

SmartScreen Prompt Security Feature Bypass Vulnerability

...

8.8CVSS7.3AI score0.62768EPSS
Exploits1
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.2 views

Microsoft SmartScreen 安全漏洞

Microsoft SmartScreen is a Microsoft-developed security technology designed to help users identify and block potential malware and phishing attacks. A security vulnerability exists in Microsoft SmartScreen. An attacker could exploit the vulnerability to bypass certain features. The following...

8.8CVSS8.5AI score0.62768EPSS
Exploits1References3
VulnCheck KEV
VulnCheck KEV
added 2024/04/09 12:0 a.m.0 views

VulnCheck KEV: CVE-2024-29988

Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web MotW feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file...

8.8CVSS7AI score0.93865EPSS
Exploits50References1
Rows per page
Query Builder