Actively exploited in the wild
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Microsoft - SmartScreen Prompt · Listed in the CISA KEV since 2024-04-30. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-29988
HighCVSS 8.8KEVSummary
A vulnerability in the SmartScreen Prompt allows a security feature bypass. Technical details are not disclosed in the description.
Risk Assessment
An attacker could exploit this vulnerability to bypass SmartScreen warnings and trick users into running malicious software, potentially leading to system infection.
Recommendation
Install the latest Windows security updates from Microsoft. Educate users about the risks of running unknown files.
Other vulnerabilities in Windows SmartScreen
See all- CVE-2024-21351HighActively exploited
A security feature bypass vulnerability in Windows SmartScreen.
- CVE-2023-36025HighActively exploited
A security feature bypass vulnerability in Windows SmartScreen. It may allow an attacker to bypass protective mechanisms.
- CVE-2023-32049HighActively exploited
Windows SmartScreen Security Feature Bypass Vulnerability. Technical details are not provided in the description.
Original NVD description (English source)
SmartScreen Prompt Security Feature Bypass Vulnerability