Firetruck

CVE-2022-44698

KEV · Ransomware

Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

View CVE record →
Vendor / Project
Microsoft
Product
Defender
Date added
Dec 13, 2022
Due date
Jan 3, 2023
Known ransomware use
Known
CWEs
CWE-755

Description

Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

Required action

Apply updates per vendor instructions.

Notes