Umbra Wiki cve cve/CVE-2022-44698
Back to wiki

CVE-2022-44698 — Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

provenance: imported · CVE: CVE-2022-44698

CVE-2022-44698: Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Microsoft
Product Defender
Date added 2022-12-13
Due date 2023-01-03
Ransomware campaign use Known

Description

Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44698; https://nvd.nist.gov/vuln/detail/CVE-2022-44698

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-44698
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog