VulnCheck KEV: CVE-2022-44698

🗓️ 13 Dec 2022 00:00:00Reported by VulnCheckType

Microsoft Defender SmartScreen security feature bypass may evade Mark of the Web with a crafted file.

Reporter	Title	Published	Views	Family All 41
attackerkb	CVE-2022-44698	13 Dec 202200:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday December 2022: SPNEGO RCE, Mark of the Web Bypass, Edge Memory Corruptions	24 Dec 202222:55	–	avleonov
BDU FSTEC	The vulnerability of the SmartScreen security component, which prevents unauthorized access and malicious programs from being executed on Windows operating systems, allows attackers to circumvent security restrictions.	16 Dec 202200:00	–	bdu_fstec
Circl	CVE-2022-44698	13 Dec 202221:41	–	circl
CISA KEV Catalog	Microsoft Defender SmartScreen Security Feature Bypass Vulnerability	13 Dec 202200:00	–	cisa_kev
CNNVD	Microsoft Windows SmartScreen 安全漏洞	13 Dec 202200:00	–	cnnvd
CVE	CVE-2022-44698	13 Dec 202200:00	–	cve
Cvelist	CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability	13 Dec 202200:00	–	cvelist
hivepro	Microsoft addresses actively exploited zero-day and numerous critical flaws	15 Dec 202211:42	–	hivepro
hivepro	Citrix ADC and Gateway Zero-Day Vulnerability Exploited by APT5	15 Dec 202213:53	–	hivepro

Vulncheck

Node

microsoft windows_10_1607Range10.0.14393.0–10.0.14393.5582x86

microsoft windows_10_1809Range10.0.0–10.0.17763.3770arm64

microsoft windows_10_1809Range10.0.17763.0–10.0.17763.3770x86

microsoft windows_10_20h2Range10.0.0–10.0.19042.2364x86

microsoft windows_10_21h1Range10.0.0–10.0.19043.2364x64

microsoft windows_10_21h2Range10.0.19044.0–10.0.19044.2364x86

microsoft windows_10_22h2Range10.0.19045.0–10.0.19045.2364x64

microsoft windows_11_21h2Range10.0.22000.0–10.0.22000.1335x64

microsoft windows_server_2016Range10.0.14393.0–10.0.14393.5582

microsoft windows_server_2019Range10.0.17763.0–10.0.17763.3770

microsoft windows_server_2022Range10.0.20348.0–10.0.20348.1366

Source	Link
console	www.console.vulncheck.com/cve/CVE-2022-44698
api	www.api.msrc.microsoft.com/cvrf/v3.0/cvrf/2022-Dec
cisa	www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
securityweek	www.securityweek.com/patch-tuesday-microsoft-plugs-windows-hole-exploited-ransomware-attacks
bleepingcomputer	www.bleepingcomputer.com/news/security/microsoft-patches-windows-zero-day-used-to-drop-ransomware/
info	www.info.securin.io/hubfs/Securin%20Ransomware%20Report%202023.pdf
blog	www.blog.google/threat-analysis-group/magniber-ransomware-actors-used-a-variant-of-microsoft-smartscreen-bypass/
mandiant	www.mandiant.com/resources/blog/zero-days-exploited-2022
ti	www.ti.qianxin.com/uploads/2024/02/02/dcc93e586f9028c68e7ab34c3326ff31.pdf
go	www.go.recordedfuture.com/hubfs/reports/cta-2024-0208.pdf

13 Dec 2022 00:00Current

7High risk

Vulners AI Score7

CVSS 3.15.4

EPSS0.76267

SSVC