HexBrain

Browse / CVEs / CVE-2024-29988

CVE-2024-29988· microsoft / smartscreen prompt· CWE-693

Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

Exploited in the wild. Listed by CISA on 2024-04-30; known to be used by ransomware.

45.2%likelihood of exploitation, next 30 days
99%of all CVEs are less likely
Nonecheck to confirm it

Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.

No ready check is stored for this CVE. Confirm it by hand from the references.

References

Use this check only on systems you are authorised to test. Where the data comes from