CVE-2024-21351

Published Feb 13, 2024

Last updated 3 months ago

Overview

Description
Windows SmartScreen Security Feature Bypass Vulnerability
Source
secure@microsoft.com
NVD status
Analyzed

Social media

Hype score
Not currently trending

Risk scores

CVSS 3.1

Type
Primary
Base score
7.6
Impact score
4.7
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Severity
HIGH

Known exploits

Data from CISA

Vulnerability name
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Exploit added on
Feb 13, 2024
Exploit action due
Mar 5, 2024
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

nvd@nist.gov
CWE-94
secure@microsoft.com
CWE-94

Configurations