CVE-2024-38217: Microsoft Windows: aktif olarak istismar edilen açık

Açıklama (NVD)

Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging.

Özet bilgiler

EPSS

%10,03 (yüzdelik 96)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2024-09-10 · Son tarih: 2024-10-01

Gerekli aksiyon: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu