Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft · Windows
Date added (CISA)
2023-03-14
Remediation due
2023-04-04
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.