Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-44698
HistoryDec 13, 2022 - 7:15 p.m.

CVE-2022-44698

2022-12-1319:15:00
CWE-755
[email protected]
web.nvd.nist.gov
541
In Wild
cve-2022-44698
windows
smartscreen
security
feature
bypass
vulnerability
nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

6.6 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%

JSON

Windows SmartScreen Security Feature Bypass Vulnerability

VendorProductVersionCPE
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

Related

mscve 1
attackerkb 1
prion 1
cisa_kev 1
cvelist 1
hivepro 2
krebs 2
trellix 2
malwarebytes 1
qualysblog 2
thn 3
avleonov 1
nessus 5
mskb 5
openvas 3
kaspersky 1
rapid7blog 1
mscve
mscve
Windows SmartScreen Security Feature Bypass Vulnerability
2022-12-13 08:00:00
attackerkb
attackerkb
CVE-2022-44698
2022-12-13 00:00:00
prion
prion
Security feature bypass
2022-12-13 19:15:00
cisa_kev
cisa_kev
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
2022-12-13 00:00:00
cvelist
cvelist
CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability
2022-12-13 00:00:00
hivepro
hivepro
Microsoft addresses actively exploited zero-day and numerous critical flaws
2022-12-15 11:42:15
Citrix ADC and Gateway Zero-Day Vulnerability Exploited by APT5
2022-12-15 13:53:41
krebs
krebs
Microsoft Patch Tuesday, December 2022 Edition
2022-12-14 17:01:07
Fat Patch Tuesday, February 2024 Edition
2024-02-13 22:28:48
trellix
trellix
The Bug Report - March 2023 Edition
2023-04-05 00:00:00
The Bug Report - March 2023 Edition
2023-04-05 00:00:00
malwarebytes
malwarebytes
Update now! Two zero-days fixed in 2022's last patch Tuesday
2022-12-14 15:00:00
qualysblog
qualysblog
Qualys Threat Research Unit: Threat Thursdays, December 2022
2022-12-29 19:05:19
The December 2022 Patch Tuesday Security Update Review
2022-12-13 23:17:17
thn
thn
December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More
2022-12-14 07:53:00
Alert: Microsoft Releases Patch Updates for 5 New Zero-Day Vulnerabilities
2023-11-15 05:46:00
Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack
2023-03-15 05:26:00
avleonov
avleonov
Microsoft Patch Tuesday December 2022: SPNEGO RCE, Mark of the Web Bypass, Edge Memory Corruptions
2022-12-24 22:55:39
nessus
nessus
KB5021235: Windows 10 Version 1607 and Windows Server 2016 Security Update (December 2022)
2022-12-13 00:00:00
KB5021234: Windows 11 Security Update (December 2022)
2022-12-13 00:00:00
KB5021249: Windows Server 2022 Security Update (December 2022)
2022-12-13 00:00:00
mskb
mskb
December 13, 2022—KB5021235 (OS Build 14393.5582)
2022-12-13 08:00:00
December 13, 2022—KB5021234 (OS Build 22000.1335)
2022-12-13 08:00:00
December 13, 2022—KB5021237 (OS Build 17763.3770)
2022-12-13 08:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5021235)
2022-12-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5021237)
2022-12-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5021233)
2022-12-14 00:00:00
kaspersky
kaspersky
KLA20117 Multiple vulnerabilities in Microsoft Windows
2022-12-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - December 2022
2022-12-13 21:24:06

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

6.6 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%

JSON
Related for CVE-2022-44698
mscve1attackerkb1prion1cisa_kev1cvelist1hivepro2krebs2trellix2malwarebytes1qualysblog2thn3avleonov1nessus5mskb5openvas3kaspersky1rapid7blog1