CVE-2024-29988
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
44.9%
98.7th percentile
CISA KEV
Listed
Added 2024-04-30 · patch by 2024-05-21
Weakness / dates
—
Published — · modified —
Timeline
- 2024-04-30 — Added to CISA KEV (actively exploited)
- 2024-05-21 — CISA patch-by deadline
Description
Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.