CVE Watch—

CVE-2024-21351

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CVSS

—

Sin CVSS

EPSS

30.3%

p98

KEV

SÍ

13 feb 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

30.3%EPSS · 30 días30.3%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Añadido a KEV

13 feb 2024

Remediar antes de

5 mar 2024

Uso conocido en ransomware

Descripción resumida

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21351; https://nvd.nist.gov/vuln/detail/CVE-2024-21351

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2025-59287—

100.0%

KEV—80Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability—CVE-2021-34527—

100.0%

KEV—80Microsoft Windows Print Spooler Remote Code Execution Vulnerability—CVE-2022-30190—

99.9%

KEV—80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability—CVE-2023-36884—

99.9%

KEV—80Microsoft Windows Search Remote Code Execution Vulnerability—CVE-2008-4250—

99.9%

KEV—80Microsoft Windows Buffer Overflow Vulnerability—CVE-2024-21412—

99.9%

KEV—80Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability—