Actively exploited in the wild
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-11-14. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-41049
MediumCVSS 5.4KEVExploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.
Risk Assessment
A user could be tricked into opening a malicious file that is not marked as coming from the internet, increasing the risk of malware infection.
Recommendation
Install Windows security updates and be cautious when opening files from unknown sources.
Original NVD description (English source)
Windows Mark of the Web Security Feature Bypass Vulnerability