CVE Catalog
Actively exploited in the wild
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-02-13. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-21351
HighCVSS 7.6KEVExploitation Probability (EPSS)
Very high risk30.34%
98th percentile - higher than 98% of all known CVEs
Summary
A security feature bypass vulnerability in Windows SmartScreen.
Risk Assessment
An attacker could bypass SmartScreen protections, potentially allowing malicious software or dangerous files to be delivered to users.
Recommendation
Apply the security update provided by Microsoft.
Original NVD description (English source)
Windows SmartScreen Security Feature Bypass Vulnerability