Overview
- Description
- Windows Mark of the Web Security Feature Bypass Vulnerability
- Source
- secure@microsoft.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.4
- Impact score
- 2.5
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
- Severity
- MEDIUM
Known exploits
Data from CISA
- Vulnerability name
- Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
- Exploit added on
- Nov 8, 2022
- Exploit action due
- Dec 9, 2022
- Required action
- Apply updates per vendor instructions.
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-863
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1B6D84B-3C19-443B-AC82-A2CBF2E91B85",
"versionEndExcluding": "10.0.10240.19567"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4E7A8EB-F231-4358-B2F0-86CE298DCB32",
"versionEndExcluding": "10.0.14393.5501"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD13C1A3-0D55-44B4-BCDA-3FE16F3FD0BB",
"versionEndExcluding": "10.0.17763.3650"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53D74F18-E886-4BDD-BF98-6E3E7FDB416A",
"versionEndExcluding": "10.0.19042.2251"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CD19777-D4BC-4091-B5DF-196E3A5ECD41",
"versionEndExcluding": "10.0.19043.2251"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A22FD3BC-3283-49FD-89E7-120BD1BD5664",
"versionEndExcluding": "10.0.19044.2251"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71F26E89-0870-4C4A-81FE-F9F793A9E706",
"versionEndExcluding": "10.0.19045.2251"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "701F768A-FE97-481C-87FE-53135E160DD8",
"versionEndExcluding": "10.0.22000.1219"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "633EBB51-1843-47BD-8CA2-7A51EAF71B44",
"versionEndExcluding": "10.0.22621.819"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5D182FC-6882-441A-994F-39721FD69EC2",
"versionEndExcluding": "10.0.14393.5501"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD54B434-65C1-414E-9498-67E871281112",
"versionEndExcluding": "10.0.17763.3650"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9883B9FF-9A73-4FAE-83C1-27CD9346ABED",
"versionEndExcluding": "10.0.20348.1249"
}
],
"operator": "OR"
}
]
}
]