CVE-2022-41049
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
CVSS
5.4
Medio
EPSS
2.6%
p85
KEV
SÍ
14 nov 2022
Exploit Today
76
0-100
Publicado: 9 nov 2022 · Última mod.: 10 ago 2026
Producto
Microsoft / Windows
Vulnerabilidad
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Añadido a KEV
14 nov 2022
Remediar antes de
9 dic 2022
Uso conocido en ransomware
No
Descripción resumida
Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.
Acción requerida
Apply updates per vendor instructions.
Notas
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41049; https://nvd.nist.gov/vuln/detail/CVE-2022-41049
Windows Mark of the Web Security Feature Bypass Vulnerability