CVE-2024-29988

Produto

Microsoft / SmartScreen Prompt

Vulnerabilidade

Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

Adicionado ao KEV

30 de abr. de 2024

Corrigir até

21 de mai. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988; https://nvd.nist.gov/vuln/detail/CVE-2024-29988