Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Microsoft · SmartScreen Prompt
Date added (CISA)
2024-04-30
Remediation due
2024-05-21
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.