CVE-2022-44698 — Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
CVE-2022-44698: Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Microsoft |
| Product | Defender |
| Date added | 2022-12-13 |
| Due date | 2023-01-03 |
| Ransomware campaign use | Known |
Description
Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44698; https://nvd.nist.gov/vuln/detail/CVE-2022-44698
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-44698
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog