Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
Microsoft · Defender
Date added (CISA)
2022-12-13
Remediation due
2023-01-03
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.