CISA Known Exploited Vulnerability

CVE-2024-38213

Microsoft · Windows

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Date added
BOD 22-01 due date
CWE CWE-693
Ransomware Unknown

CISA description

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.