CVE-2024-21351—Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

漏洞名称

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

描述

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21351
• https://nvd.nist.gov/vuln/detail/CVE-2024-21351

相关 CWE

• CWE-94