Actively exploited in the wild
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-09-10. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-38217
MediumCVSS 5.4KEVExploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.
Risk Assessment
A user could be tricked into opening a malicious file that is not marked as coming from the internet, increasing the risk of malware infection.
Recommendation
Install Windows security updates and be cautious when opening files from unknown sources.
Original NVD description (English source)
Windows Mark of the Web Security Feature Bypass Vulnerability