CVE-2024-29988: Microsoft SmartScreen Prompt: aktif olarak istismar edilen açık

Açıklama (NVD)

Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.

Özet bilgiler

EPSS

%45,15 (yüzdelik 99)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2024-04-30 · Son tarih: 2024-05-21

Gerekli aksiyon: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu